IT Security & Risk Manager

IT Security & Risk Manager

Birmingham | Hybrid (2 days per week onsite) | Up to £74,000 + Benefits

Are you an experienced cyber security and risk professional looking for an opportunity to shape and influence an organisation's security strategy?

We're seeking an IT Security & Risk Manager to lead security governance, risk management, and cyber resilience initiatives, ensuring a robust and secure technology environment. Based in a well-established organisation, this role offers the chance to work closely with senior stakeholders while leading a small, specialist security team.

Our client is a respected organisation with a strong focus on technology, governance, and continual improvement. Security sits at the heart of its operations, and this position will play a critical role in protecting systems, managing risk, and driving strategic security initiatives.

Why Join?

• Lead and shape the organisation's cyber security strategy
• Influence senior leadership and board-level stakeholders
• Own and deliver a technical security roadmap
• Manage and develop a dedicated security and risk team
• Hybrid working with just 2 days per week onsite
• Opportunity to make a lasting impact across a complex technology environment

Key Responsibilities

• Lead the IT Risk and Security function and manage a small team
• Develop and deliver the technical security roadmap
• Oversee IT security policies, controls, and governance frameworks
• Manage IT risk assessments, threat modelling, and mitigation activities
• Own the IT risk register and ensure risks are effectively monitored and managed
• Lead responses to significant cyber security incidents
• Oversee vulnerability management and remediation programmes
• Act as the organisation's security subject matter expert, advising senior stakeholders and leadership teams

Requirements

• Proven experience in a senior IT Security, Cyber Security, or Information Security position
• Strong knowledge of risk management and threat analysis methodologies
• Experience implementing and maintaining security frameworks including ISO 27001
• Knowledge of Cyber Essentials and wider security best practices
• Experience developing security policies, controls, and procedures
• Ability to communicate and influence stakeholders at all levels
• CISSP, CISM, or similar security certification (or working towards) preferred

Desirable Experience

• Experience within a regulated environment
• Cyber resilience and security operations expertise
• Experience managing security professionals
• Strong commercial awareness and stakeholder management skills

Salary: Up to £74,000

Working Pattern: Hybrid, 2 days per week onsite

We welcome applicants from all backgrounds. Our Client are an equal opportunities employer. Xpertise is acting as an employment agency & business.

At Xpertise, we keep things human, your application will always be reviewed by a real person. We do not rely on AI or automated screening tools. Every candidate receives fair, considered attention from our team.

Right to work in the UK is required for this role.