Information Security Manager

Own, operate and continually improve our ISMS, information security policies, standards and risk management processes.

Lead ISO 27001 certification and ongoing assurance, coordinating audits, evidence collection and corrective actions.

Oversee supplier security assessments and customer assurance responses, supporting defence and contractual security requirements.

Work with business and technical teams to assess risks, agree controls and drive improvements, incorporating lessons from incidents and reporting progress to leadership.

Build a positive security culture through engaging awareness activities, practical guidance and collaboration, making security part of everyday decision-making and encouraging people to raise concerns.

Hands-on experience implementing and running an ISMS, from establishing its scope, policies and risk processes through to day-to-day operation, audits and continual improvement.

Strong practical knowledge of ISO 27001 and the ability to translate security requirements into clear, achievable actions.

Comfortable taking ownership, influencing stakeholders and improving security behaviours across an organisation—not just writing policies.

Experience applying NIST frameworks, supporting SOC 2 readiness or audits, or working with Cyber Essentials would be valuable.

Experience in a highly regulated environment, such as defence or aerospace, and working alongside Quality Management teams to align policies, processes, audits and continual improvement would also be advantageous.

Competitive salary

Stock options, giving you the opportunity to share in the long-term success of Cambridge Aerospace

Private medical and dental insurance

Cycle to work scheme

Catered lunches

The opportunity to work alongside an ambitious, highly capable team developing technology with a tangible real-world mission