Security Manager, London
Hybrid · Brixton Greater London, England, United Kingdom
Job Summary
Security Manager to lead Intrepid Travel’s global security operations, oversee vulnerability management, incident response, disaster recovery and business continuity, and drive an enterprise-wide security strategy across cloud and on-prem environments. You will lead a globally dispersed team, work with technology leaders and senior stakeholders to improve security practices, ensure data privacy controls, and achieve regulatory compliance (GDPR, HIPAA, ISO; aligned with NIST, ISO 27001, PCI). The role is senior, hands-on, and requires balancing strategic leadership with technical depth; based in Brixton in a full-time, permanent, hybrid capacity with an expectation to be onsite ~3 days per week. Tools and concepts include security platforms, governance, risk management, compliance audits, and collaboration with external vendors and security partners.
Required Qualifications
- Relevant tertiary qualification in Computer Science, IT, Systems Engineering, Cyber Security or a related field
- Strong experience with compliance and regulatory frameworks such as GDPR, HIPAA and ISO
- Deep knowledge of IT security standards including NIST, ISO 27001 and PCI
- Expert understanding of information systems, security solutions and defence capabilities across cloud and on-prem environments
- Experience overseeing data privacy practices and implementing effective data protection controls
- Proven capability protecting information assets from cyber threats
- Experience conducting, monitoring and reporting on compliance audits
- Strong risk management experience, including identifying, assessing and mitigating security risks
- Demonstrated ability to set goals, lead a security team, and deliver measurable security improvements
- Experience linking disaster recovery and business continuity within an incident response context
- Confidence reporting security outcomes and recommendations to senior leaders and key stakeholders
- Desirable experience includes: Industry-recognised certifications such as CISSP, CISM or CRISC
- Cloud security experience across platforms such as Microsoft Azure and AWS
- Experience working with DevSecOps teams to embed security through automation
- Managing external vendors and security partners
- Experience working with globally distributed teams
Apply with one swipe on Sorce. We auto-fill applications and apply on your behalf — no cover letters, no 40-minute forms.
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.