Salary: £40,000 - 73,000 per year Requirements: Proven experience in an information security role within a UK-based organisation, ideally supporting public sector or critical services. Practical experience with security monitoring and incident response tooling (SIEM/XDR). Strong working knowledge of ISO/IEC 27001 and experience maintaining an ISMS. Practical experience with Cyber Essentials / Cyber Essentials Plus certification. Experience managing security risks, incidents, audits, and compliance activities in operational environments. Ability to balance strategic leadership with hands-on delivery in a small organisation. Strong understanding of service resilience, availability, and risk in mission-critical systems. Excellent communication skills, with the ability to engage both technical and non-technical stakeholders. Responsibilities: Own and be accountable for the organisations overall security posture, ensuring alignment with business objectives and public sector expectations. Lead the implementation, maintenance, and continuous improvement of the ISMS in line with ISO/IEC 27001. Maintain Cyber Essentials Plus certification, ensuring ongoing compliance with technical controls. Develop and maintain the Security Management Plan, with a focus on resilience, availability, and service continuity. Provide regular assurance reporting to senior leadership and stakeholders. Own and maintain the Security Risk Register, ensuring risks are identified, assessed, and managed in line with organisational risk appetite. Conduct and support risk assessments, internal audits, and external certification activities. Ensure compliance with relevant UK regulatory and security requirements, including GDPR and guidance from the National Cyber Security Centre. Act as the primary point of contact for security incidents, leading or coordinating response activities. Take a hands-on role in incident investigation, root cause analysis, and remediation. Ensure that incident response processes are aligned to the operational needs of emergency service environments. Oversee vulnerability management, security testing, and remediation activities, engaging third parties where required. Ensure security is embedded in the design and operation of services supporting emergency response. Work closely with operational and technical teams to maintain high levels of system availability and resilience. Support business continuity and disaster recovery planning, testing, and continuous improvement. Develop and deliver targeted security awareness and training programmes. Promote a strong security culture, ensuring all staff understand their responsibilities in protecting critical services. Act as a trusted advisor to senior leadership, operational teams, and external stakeholders. Support engagement with public sector customers, providing assurance on security controls and practices. Collaborate with suppliers and partners to ensure security requirements are met across the supply chain. Technologies: AI Embedded Support Robotics Security More: We are a part of Scandinavias largest defence company, offering leading solutions and services in defence, aviation, space, and civil security. Our UK presence is rapidly growing, providing us with a wide range of opportunities for personal fulfilment and career growth. With over 600 employees across eight UK sites, we specialize in areas such as software engineering, underwater robotics, radars, AI, and armed forces training. This role is a critical part of our Public Safety Solutions Business Unit, where we focus on ensuring the protection of systems and data supporting UK public sector operations. last updated 14 week of 2026