Interim Security Manager (3-Month Contract)

Role overview Provide hands-on security leadership and operational cover during a three-month contract, taking responsibility for day-to-day security operations and incident response. You will work closely with infrastructure, IT, engineering, and security colleagues, while documenting practical procedures and helping the organization build a clearer view of security risk.

Responsibilities - Take over security operations, respond to questions from staff, and track recurring issues to improve guidance. - Monitor and investigate cloud alerts, working with infrastructure colleagues to distinguish routine activity from potential threats. - Guide IT investigations into endpoint protection findings and other security alerts. - Manage web application firewall controls for public services and respond to unusual traffic or abuse. - Assess new vulnerabilities, threat intelligence, and third-party software risks, then coordinate fixes with engineering owners. - Lead incident triage, escalation, and communication; keep continuity procedures current. - Create practical runbooks, document common security processes, and map important services and their external dependencies.

Requirements - Proven information security or cybersecurity experience, including at least two years of people or team leadership and the ability to take ownership quickly. - A recognized security qualification or equivalent practical experience. - Strong working knowledge of cloud security controls, including GuardDuty, WAF, CloudWatch, IAM, and Service Control Policies. - Experience with detection, alert triage, incident response, and tools such as endpoint detection, antivirus, or vulnerability scanners. - Familiarity with compliance programs such as PCI DSS, ISO 27001, HIPAA, or GDPR, including audit evidence and client-facing security materials. - Understanding of secure development and software supply chain risks, plus the ability to explain technical risks clearly and influence teams.

Nice to have - Experience with PCI DSS v4 or later, interim security leadership, SaaS, or remote engineering teams. - Threat modeling for products involving payments or financial data; vulnerability management, penetration testing, VPNs, endpoint management, or web application firewall configuration. - Experience applying AI tools to security monitoring or triage.

Benefits and work setup The position is a three-month contract. Flexible hours and working from home are possible, and remote work is considered. Listed benefits include healthcare and wellbeing support, pension and insurance provisions, family leave, travel schemes, and learning resources.