Information Security Manager – Hybrid (3 days onsite)

About the role

We are partnering with a well‑established financial services organisation that needs an experienced Information Security Manager to own and evolve its cyber security posture. The role blends strategic governance with hands‑on technical delivery and includes a modest amount of network engineering.

Key responsibilities

• Lead the development and execution of the organisation’s information security strategy and day‑to‑day security operations.
• Drive compliance with ISO 27001, NIST and CBEST frameworks across all new infrastructure and cloud services.
• Manage vulnerability programmes, coordinate external penetration testing and work closely with an outsourced SOC to investigate and respond to incidents.
• Ensure comprehensive SIEM monitoring, develop and maintain security policies, standards and procedures.
• Assess cyber‑risk, recommend mitigations and act as the internal security subject‑matter expert for business stakeholders.
• Support the design, implementation and maintenance of secure LAN, WAN and VPN environments, including Cisco firewalls, routing and switching.
• Contribute to disaster‑recovery planning, network resilience and high‑availability initiatives.

Required profile

• Proven experience in information security within a complex, regulated environment.
• Strong knowledge of security governance, risk management and incident response.
• Comfortable working with both security and networking teams and able to influence senior stakeholders.

Required skills

• Cisco Firepower (ASA/FTD) and Palo Alto firewalls
• Cisco Catalyst switching, OSPF, VPN technologies
• Cisco ISE, TACACS, IPS and endpoint protection
• SIEM platforms and security monitoring (e.g., LogRhythm, Rapid7)
• Vulnerability management and penetration testing
• ISO 27001, NIST and other risk‑management frameworks
• Security policy development, audits and incident handling
• Tools such as Trellix and Symantec Endpoint Protection

What we offer

• Competitive salary (£90,000‑£100,000 per annum)
• Hybrid working model – three days onsite in London
• Opportunity to shape security strategy in a leading financial services firm