Information Security Manager

Salary: £85,000 - 100,000 per year

Requirements:

• 5+ years of experience in information security, cybersecurity, or product security
• Strong experience with ISO 27001 and recognised frameworks such as NIST and OWASP
• Experience conducting risk assessments, threat modelling, and vulnerability management
• Experience integrating security into software development lifecycles
• Strong cloud security knowledge, ideally AWS
• Experience supporting audits, regulatory reviews, or compliance activities
• Excellent stakeholder management and communication skills
• Ability to work independently and deliver pragmatic, risk-based solutions
• Experience in Medical Devices, HealthTech, or Software as a Medical Device (SaMD) is highly desirable
• Product cybersecurity experience is highly desirable
• Knowledge of ISO 13485, ISO 14971, GDPR, HIPAA, and FDA cybersecurity guidance is highly desirable
• Experience with connected devices, mobile applications, or cloud-hosted healthcare platforms is highly desirable
• Professional certifications such as CISSP, CISM, CRISC, CSSLP, ISO 27001 Lead Auditor, or Lead Implementer are advantageous

Responsibilities:

• Maintain and improve our Information Security Management System (ISMS), policies, procedures, and controls
• Lead cybersecurity risk assessments, threat modelling, and security reviews
• Oversee penetration testing, vulnerability management, and remediation activities
• Advise on secure design, cloud security, mobile security, authentication, encryption, and access control
• Embed cybersecurity requirements within our software and product development processes
• Support regulatory submissions, audits, inspections, and customer security assessments
• Monitor emerging threats affecting our applications, cloud services, and connected technologies
• Manage incident response, business continuity, and cyber resilience activities
• Review third-party suppliers and technology partners from a security perspective
• Provide security awareness training and guidance across our organisation
• Present security risks and recommendations to our senior leadership

Technologies:

• AWS
• Cloud
• Support
• Mobile
• OWASP
• Security

More:

We are an innovative digital health organisation developing market-leading healthcare technology used across international markets. We are growing within a highly regulated technology environment and are seeking a security subject matter expert to lead and mature our cybersecurity capability, working closely with our Software Development, Quality, Regulatory, Clinical, IT, and Operations teams. This is a 12-month fixed-term role with a hybrid arrangement requiring attendance in Cambridge once a week. The full-time equivalent salary is £85,000–£100,000.

last updated 39 week of 2026