Job Description

We're currently recruiting for an IT Manager - Information Security to join our centralised Group IT Team. This role will involve leading Kier Transportation (including Transportal) Information Security practise and assessing the security governance, risk and compliance requirements across the Kier Transportation business area.

Location

: Flexible, hybrid working with travel to Rushden, Northamptonshire (office). Travel to various UK wide Transportation sites and offices required for audits

Hours

: 37.5 hours per week - some flexibility on hours available if desired, just let us know when you speak to us

We are unable to offer certificates of sponsorship to any candidates in this role.

What will you be responsible for?

As an IT Manager - Information Security, Governance, Risk and Compliance, your day-to-day responsibilities will include, but not be limited to:


Working with Kier's strategic partners to ensure overall Information Security governance is understood and being adhered to by all partners. Providing consultative advice and coaching to security customers within the Kier Transportation environment, and wider business as required. Creating status reports and briefings on security matters for staff and senior management. Supporting bids by providing security review and assurance around Bid security requirements. Ensuring upward balanced and expert reporting to guide stakeholders in how to manage Kier IT Security risks. Ensuring that Transportation adhere to Kier policies and authorised procedures. Devising and delivery of Security Education training aligned to specific contractual requirements.

What are we looking for?

This role of IT Manager is great for you if:


Security expertise backed by certifications such as

CompTIA Security+

,

ISO 27001 Lead Implementor/Auditor

,

CISM

, or

CISSP

- or equivalent hands-on experience. Strong technical knowledge in

cloud security

,

IAM

,

network segmentation

,

OWASP

, and

DevSecOps

. Proven ability in

risk management

, applying frameworks like

ISO 27001

and

NIST

to deliver proportionate controls. Experience in

secure-by-design principles

and validating large-scale, high-risk services. Familiarity with key standards such as

List-X (FSC)

,

ISO 27001

,

Cyber Essentials

, and

Cyber Essentials Plus

. Awareness of how emerging technologies impact security requirements and architecture. Understanding of

information management

,

SDLC

,

IT service management

,

Enterprise Architecture

, and

ITIL

frameworks.




We're all about finding potential here at Kier, and transferrable skills are always welcome! So, even if you don't tick every box, please apply and we can have a chat.

Rewards and benefits

We're proud to be able to offer our brilliant people a wide variety of benefits that you can tailor to your needs. You can see more information of benefits here.

Diversity and inclusion

Making Kier a diverse and inclusive place to work is a huge priority for us. We're proud of the steps we've taken so far, but we know we must always do more. Our employees are key in shaping Kier's diversity and inclusion initiatives and our people have made a huge impact on how we work, by using their experiences to shape our policies. You can see our D&I action plan here.



As a Disability Confident employer, we will ensure that a fair and proportionate number of disabled applicants that meet the minimum criteria for this role will be offered an interview.





We look forward to seeing your application to #joinkier



#LI-TD1