Information Security Manager

JOB DESCRIPTION

Are you an Information Security Manager looking for an exciting new role?

NHS Shared Business Services (SBS) are currently recruiting for an Information Security Manager with a technical background to join an established team supporting both internal and external customers. This is a fantastic opportunity for individuals looking to make a difference and grow within a high performing information security team working on critical public sector projects. If you have a passion for technology and governance, risk and compliance we want to hear from you.

This role would be based out of our Leeds office with the vast majority of your time spent working from home.
Due to the nature of the client we would need candidates to go through a BPSS security clearance check for this role.

What you’ll be doing:

• Information Security Governance & Frameworks
  
• Own, maintain, and continually improve the Information Security Framework, including policies, standards, procedures, and technical control sets.
  
• Lead and develop the ISO 27001 Information Security Management System (ISMS) and ensure its alignment with cloud, digital platforms, and emerging technologies.
  
• Operate the Information Security risk and issue management framework, ensuring risks are identified, assessed, prioritised, tracked, and remediated.
  
• Technical Security Leadership
  
• Provide expert security guidance across IT infrastructure, cloud, networks, identity, application development, and system design.
  

What you’ll bring:

• A good technical understanding of IT environments, including areas such as infrastructure, networking, systems engineering, cloud services, DevOps, or IT operations, to support effective information security decision-making.
  
• Demonstrable experience implementing and operating frameworks such as ISO 27001 and Cyber Essentials Plus.
• Experience conducting or overseeing penetration testing, threat modelling, and vulnerability assessments.
  
• Knowledge of frameworks such as NIST CSF, CIS Controls, and OWASP.
  

If you’re interested in this role but not sure if your skills and experience are exactly what we’re looking for, please do apply, we’d love to hear from you!

Employment Type: Full-time, Permanent
Location: Hybrid (Occasional travel to our Leeds office)
Security Clearance Level: BPSS
Internal Recruiter: Olly Walker
Salary: Up to £55,000
Benefits: £5,400 car allowance, 25 days annual leave with the option to buy additional days, private medical, life assurance, pension, and generous flexible benefits fund.

Although this role is advertised as full-time, we believe that flexibility at work can promote work/life balance, increase your motivation, reduce stress and improves performance and productivity. We support different ways of working and can offer a range of flexible working arrangements. So, if you’re interested and need to work flexibly, we encourage you to apply and talk to us about what might be possible.

Loved reading about this job and want to know more about us?

NHS Shared Business Services (NHS SBS) was created by the Department of Health and Social Care to deliver corporate services to the NHS. A unique joint venture with Sopra Steria, a European leader in digital services and software development, we make life easier for NHS employees, patients, and suppliers, and deliver value for money to the taxpayer. Proud members of the NHS family, we provide finance & accounting, digital, procurement and workforce services to more than half the NHS in England, and our solutions are underpinned by cutting-edge technologies and our teams’ expertise, in-depth understanding of the NHS, and commitment to service excellence.

We share common values and unity of purpose with the rest of the NHS family, are committed to being a force for good, and are dedicated and empowered to act responsibly and sustainably at organisational, team and individual level.

Would you like to join us on our journey?