Information Security Manager - HS2 Main Works

Information Security Manager - HS2 Main WorksGeneral informationCity/town:LondonJob field:ConstructionExternal closing date:Friday, August 28, 2026Type of contract:PermanentID:6614Description and requirementsAt Skanska, we’re shaping the way we live, work and connect. As one of the world’s largest construction and development companies, we work together with customers, communities and partners to shape a better society.You will be working in the HS2 Main Works, the SCS Joint Venture with Costain and Strabag, our HS2 Main Works South team is delivering one of the UK’s most ambitious infrastructure projects – 26 miles of tunnels from London Euston to West Ruislip, along with viaducts, bridges and embankments that will connect communities for generations.We are currently looking for an Information Security Manager who will:As the Information Security Manager, you will:Lead the implementation, maintenance, and continual improvement of the Information Security Management System (ISMS) in line with ISO 27001Achieve and maintain ISO 27001 certification, ensuring controls, evidence, and processes remain compliant year roundMaintain and communicate an effective information security risk management framework that enables informed decision making at senior levelsDrive proactive risk identification, assessment, treatment, and monitoring across the organisationChampion a strong security culture across SCS JV, ensuring policies and expectations are understood and embeddedInfluence and support process owners to improve their processes where security weaknesses are identifiedLead, mentor, and develop junior InfoSec team members, ensuring the team has the competence and capability to run an effective ISMSTrack emerging risks, threats, and compliance changes, ensuring the ISMS evolves to remain effective and relevantWe are looking for:Demonstrable experience working with Cyber EssentialsCertified Information Security Manager (CISM) or equivalent qualificationDemonstrable understanding of cloud technologyDemonstrable working understanding of security technology and how it’s deployed to create effective technical controls for example; Firewalls, IDP, IAM, MFA, SSO, DLP, CASB, MDM, EDR etcDemonstrable risk management knowledge and how to influence senior management to make informed decisions on risk treatmentWorking knowledge of the UK Data Protection Act (DPA) / GDPRDemonstrable good level of written and spoken EnglishA commonly identifiable security qualification i.e. CISA, CRISC, CDPSE, CGEIT, CCOA, CISSP etcWhat we offer:24/7 digital GP service for you and your family  Financial wellbeing and employee assistance  Professional development  Enhanced family benefits (including maternity, paternity, dependants and parental bereavement leave)  Inclusion and Diversity We thrive through embracing differences as we know that diversity opens a rich potential for new ways of thinking, helping us to build successful and high-performing teams. We call it The Skanska Way.Flexible working Where possible, we offer a range of flexible working options, and we would be happy to discuss this at the application stage if this is something you’d like to explore. Reasonable adjustments We want you to feel confident and supported throughout every stage of our recruitment process. If you need any adjustments to help you during your application, please contact us at recruitment@skanska.co.uk or call 0330 105 2000 – Option 5 & 1.Closing date We encourage you to apply as early as possible, as the closing date may be subject to change.If this role would be of interest, please click apply and join our team of 27,000 problem solvers and creative thinkers, where knowledge is our greatest creation. We share, listen and support your success – every step of the way.If you are an internal candidate currently working on the SCS project, please apply through the SCS JV Careers Portal to avoid duplicate applications.