Construction Sector About the Role An exciting opportunity has arisen for an experienced Information Security Manager to join a growing and forward-thinking organisation. Reporting to senior leadership, you will be responsible for developing, implementing, and maintaining the company's information security strategy, ensuring the protection of business-critical data, systems, and infrastructure. This position offers the opportunity to shape and enhance the organisation's security posture while working closely with both technical and non-technical stakeholders across the business. Key Responsibilities * Develop, implement, and maintain information security policies, procedures, and controls. * Lead and manage the organisation's information security and cyber security strategy. * Ensure compliance with ISO 27001, Cyber Essentials, UK GDPR, and other applicable standards and regulations. * Conduct security risk assessments and implement appropriate mitigation measures. * Manage security incidents, investigations, and response activities. * Monitor emerging threats and vulnerabilities, providing recommendations to strengthen security controls. * Support internal and external security audits and compliance programmes. * Deliver security awareness training and promote a strong security culture throughout the business. * Collaborate with IT teams and third-party providers to ensure secure systems and services. * Produce regular reports and updates for senior management on security risks and performance. Requirements * Proven experience working in an Information Security or Cyber Security Management role. * Strong understanding of information security frameworks, policies, and industry best practices. * Experience with ISO 27001 and supporting or managing security compliance programmes. * Knowledge of risk management, security assessments, vulnerability management, and incident response. * Experience developing and maintaining security policies, procedures, and controls. * Strong understanding of data protection legislation and UK GDPR requirements. * Ability to work confidently with both technical and non-technical stakeholders across the organisation. * Excellent communication, influencing, and problem-solving skills. * High levels of integrity, professionalism, and attention to detail. * Relevant professional qualifications such as CISM, CISSP, or ISO 27001 Lead Implementer/Auditor would be highly advantageous. What's on Offer? ✅ Competitive salary and benefits package ✅ Hybrid and flexible working arrangements ✅ Career progression opportunities within a growing organisation ✅ Ongoing professional development and certification support ✅ Collaborative and supportive working environment ✅ Opportunity to play a key role in shaping the company's cyber security strategy