Information Security Manager
Company: Together
Role summary
Information Security Manager is a role at Together in Stockport, England, United Kingdom (on-site). Posted 2026-08-19. Experience level: 5-10.
- Job title
- Information Security Manager
- Company
- Together
- Location
- Stockport, England, United Kingdom
- Work arrangement
- on-site
- Category
- Cybersecurity
- Experience level
- 5-10
- Date posted
- 2026-08-19
If you are looking for a leadership role that balances technical security oversight with organizational strategy, this opportunity at Together is a fantastic fit. You will get to own the security roadmap for a growing team while enjoying a flexible, supportive remote work environment that values high-level impact over rigid structure.
Job description
Company Description
Benefits of working at Together
Based on site in Cheadle (SK8 3GW) - Monday to Friday
26 days holiday, and a day off for your birthday (increasing with service to 30 days), plus bank holidays
Free access to company holiday homes
Buy & sell holidays
Discretionary annual bonus plus an additional Shared Reward Bonus
Matched pension contribution
Health cash plan plus Private medical insurance
Life assurance and Critical illness cover
Travel season ticket loans and Ride to work scheme
Free local gym access
Local bar / restaurant discounts
–––––––––––––
Company Description
We’re Together. For over 50 years, we’ve helped thousands of people, businesses and professionals unlock their property ambitions with our common-sense approach to mortgages and secured loans.
We take the time to understand our customers and our door is always open, so we can often help when other lenders can’t or won’t. Based in Cheadle, Cheshire, our 950 colleagues help our customers throughout the UK, backed by the power of a £8 billion loan book.
–––––––––––––
Job Description
Reporting to the Chief Information Security Officer, you will play a critical role in supporting the development and continuous improvement of our Information Security governance, risk management, and assurance framework .
You will be a seasoned InfoSec professional able to support and maintain governance and leading frameworks such as NIST CSF and the UK Cyber Assessment Framework (CAF) to identify, assess and managing risks across the Group. You will develop risk metrics (KPIs/KRIs). However, what is critical for the role is the ability to deliver security training and awareness programmes as well as leading third-party cyber, information and AI security due diligence. This would include ongoing monitoring of risks and incidents. The role also involves supporting audits, driving continuous improvement across policies and controls, and implementing monitoring solutions using Microsoft Purview and DLP. Working closely with the CISO and Cyber Security team, you will contribute to governance, reporting and incident response, while building strong stakeholder relationships across IT, Risk and the wider business.
In a nutshell, responsibilities include:
Maintain and enhance Information Security governance frameworks aligned to NIST CSF and CAF
Define and report on security risk metrics, KPIs and KRIs
Identify and assess Information Security risks across business and technology environments
Deliver engaging security awareness and training programmes
Conduct third-party cyber, information and AI security due diligence
Support audit and assurance activities , including evidence collation
Drive continuous improvement across policies, processes and controls
Support Microsoft Purview and DLP monitoring capabilities
Partner with the CISO on governance, reporting and incident response activities
Qualifications
You are a proactive and detail-oriented Information Security professional with experience working in regulated environments and a passion for improving security maturity.
Essential Experience
Proven experience in third-party security due diligence
Experience delivering Information Security training and awareness
Hands-on experience with Microsoft Purview and DLP
Strong understanding of risk management and governance
Experience working within regulated environments
Experience developing policies, processes and standards
Knowledge of cloud and SaaS-based environments
Desirable
CISM or equivalent certification
Strong presentation and stakeholder engagement skills
Experience reviewing technical security designs
If you feel you have some of the skills mentioned above, but not all, please do still apply and we would be happy to have a further discussion with you in regards to your suitability for the role.
Additional Information
–––––––––––––
Together embraces diversity and inclusion, and are proud to be an equal opportunity workplace. Not only do we welcome difference – we celebrate it, support it and really value our colleagues for who they are. We are committed to building a team that represents a variety of backgrounds, perspectives and skills.
If you feel you'd benefit from any support or reasonable adjustments during any stage of the recruitment process, please don’t hesitate to let us know when completing your application. This information will be picked up by our team, so we can try and put steps in place to help you be at your best through this process.
Click here for more information on our Recruitment Process
Please note that all successful applicants will undergo relevant employment reference, financial and criminal record checks.
#TMHP
Working Hours: Standard (09:00am-17:30pm)
Department: Cybersecurity
Office or Field Based: Office Based (Cheadle, SK8 3GW)
Contract type: Permanent
Compensation: up to GBP 65000 - yearly