Information Security Manager - Risk Management

Job Title: Information Security Manager Risk Management

Location: UK, Flexible + Hybrid Working Arrangements

Compensation: Competitive Salary + Benefits

Role Type: Full time / Permanent

Role ID: SF

Shape Cyber Resilience. Protect What Matters. Create a Safer Future.

At Babcock, we’re working to create a safe and secure world, together. If you join us, you can play your part as an Information Security Manager - Risk Management at one of our main UK locations, including Bristol, Devonport, London, Leicester, Portsmouth, Rosyth or Warrington.

The role

As Information Security Manager - Risk Management, you'll play a critical role in strengthening cyber resilience across a global organisation that supports defence, aerospace and engineering programmes of national importance. This is an exciting opportunity to lead the development and continuous improvement of information and cyber security risk management practices, helping to protect critical services, infrastructure and sensitive information.

Working across the business, you'll collaborate with senior leaders, project teams and technical specialists to ensure cyber and information security risks are effectively identified, assessed and managed. Your expertise will influence strategic decision-making, support regulatory compliance, and contribute to the delivery of Babcock's wider cyber security strategy.

Day-to-day you'll be responsible for:

• Leading the identification, assessment and management of cyber and information security risks across the organisation.
• Developing and continuously improving the cyber security risk management framework, policies and governance processes.
• Partnering with business leaders, project teams and technical specialists to ensure effective risk treatment and informed decision-making.
• Presenting risk insights, recommendations and assurance reporting to senior stakeholders.
• Supporting security assurance activities and ensuring alignment with regulatory, contractual and business requirements

This role is full time, 37.5 hours per week and can be based at any of our main UK locations. Hybrid working arrangements are available.

Essential experience of the Information Security Manager - Risk Management:

• Significant experience in Information Security, Cyber Security, Risk Management or Governance roles.
• Experience operating enterprise risk management processes.
• Strong understanding of cyber risk assessment methodologies, information security governance, security controls and assurance practices.
• Experience developing risk treatment and remediation plans within complex organisations.
• Ability to communicate technical security issues in clear business risk language and present findings to senior stakeholders.

Qualifications for the Information Security Manager - Risk Management:

Essential:

• Relevant professional experience demonstrating expertise in information security, cyber security or risk management.

Advantageous:

• Certified Information Systems Security Professional (CISSP).
• Certified Information Security Manager (CISM).
• Certified in Risk and Information Systems Control (CRISC).
• Equivalent information security, governance or risk management qualifications.

Security Clearance

The successful candidate must be able to achieve and maintain Standard (BPSS) and Security Check (SC) security clearance for this role.

Many of the positions within our company are subject to national security clearance and Trade Control restrictions. This means that your eligibility for certain roles may be affected by your place of birth, nationality, current or former citizenship, and any residency you hold or have held. Further details are available at .

What we offer

• Generous holiday allowance
• Matched contribution pension scheme, with life assurance
• Access to a Digital GP, annual health check, and nutritional consultations through Aviva DigiCare+
• Employee shopping savings portal
• Payment of Professional Fees
• Reservists in the armed forces receive 10-days special paid leave
• Holiday Trading is a benefit that allows UK Babcock employees to buy additional leave or to sell up to one working week of annual leave from their annual entitlement. This Window opens February through to March annually.
• ‘Be Kind Day’ enables employees to take one working day's paid leave a year (or equivalent hours) to undertake volunteering work with their chosen organisation or registered charity

Babcock

We’re Babcock — a global FTSE organisation with over 26, people working together to make a difference.

Here, you’ll be part of something bigger. From initial design to final decommissioning, your work will contribute to products and services that are essential to national security and public infrastructure. Together, we’re building a future that lasts — not just through the impact we make, but through meaningful careers that respect your work-life balance.

We call that lifetime engineering.

Join us and see how far we can go, together.

We are a disability confident committed employer.