About the Role

Job Title: Information Security Manager
Salary: £70,000 - £80,000
Work Model: Hybrid

Key Responsibilities

• Develop and implement security strategy: Align security plans with business goals.
• Own the security program: Build and maintain an information security management system.
• Promote security culture: Work closely with IT to educate and enable teams across Attest.
• Support compliance: Partner with the Legal team to ensure adherence to ISO 27001, GDPR, and other standards.
• Manage risk proactively: Identify and mitigate vulnerabilities across cloud environments and applications.
• Embed secure development: Collaborate with Engineering to integrate DevSecOps best practices.
• Enhance threat detection and incident response: Improve the ability to react quickly and effectively.
• Assess and secure third-party vendors: Ensure strong security across the ecosystem of vendors and partners.

Qualifications

• Experience in information security, preferably in a SaaS or cloud-based environment.
• Strong knowledge of cloud security (AWS, GCP, or Azure; Attest uses AWS) and DevSecOps principles.
• Experience of implementing and owning an ISO 27001 security framework.
• Hands-on expertise in network security, application security, IAM, and incident response.
• Proficiency with SIEM, IDS/IPS, WAFs, EDR, and vulnerability management tools.
• Understanding of secure coding practices and ability to collaborate with engineering teams.
• Strong communication skills to articulate security risks effectively to technical and non-technical audiences.
• Certifications such as CISSP, CISM, CCSP, or OSCP are a plus but not required.

Benefits

• Work from anywhere up to 80 days a year.
• 25 days holiday per year plus additional festive days.
• £40 monthly wellbeing budget.
• £200 yearly L&D budget, plus access to a larger budget for qualifications and courses.
• Private Medical Insurance.
• Access to free therapy through Spill.
• 2 days per month to do charity or community work.
• Enhanced parental leave (18 weeks paid leave for Primary carer).
• Up to 12 weeks paid leave for premature births and neonatal care.
• Paid leave for IVF and fertility treatment and pregnancy loss.
• Share options.

Additional Information

• This role is ideal for someone looking to take ownership of security in a growing company, working with modern technologies as part of a supportive team.
• This role might not be suitable if you prefer managing a team, have never been through an ISO 27001 or similar security audit process, or are seeking a fully remote position.