IT Security Manager

As IT Security Manager, you will take ownership of the organisation’s IT security posture, driving continuous improvement and ensuring we remain resilient in an evolving cyber-threat landscape.

About REXEL

At Rexel UK, we actively seek talent with different experiences, background and perspectives because we know that diversity drives fresh ideas and great results. Working together as one team, we’re building a high-performance culture that not only drives success but also creates real value for our customers and communities. Creating an environment where individuality is celebrated and creativity flourishes, we're making sure everyone feels supported and confident to be their best.

At Rexel UK, we are looking for an experienced and commercially minded IT Security Manager to lead the development, implementation and continual improvement of our technical security strategy across Rexel UK and Ireland.

Responsibilities

• Developing, implementing and maintaining Rexel UK and Ireland’s technical security strategy, standards, processes and controls.
• Ensuring compliance with Cyber Essentials as a minimum, National Cyber Security Centre guidance, GDPR, PCI DSS and other relevant regulatory requirements.
• Managing major security incidents and overseeing risks relating to information security, physical security, business continuity, crisis management, privacy and compliance.
• Coordinating security risk assessments with technology and business teams and ensuring appropriate mitigation plans are implemented and monitored.
• Embedding security-by-design principles across IT projects, platforms, infrastructure and technical architecture.
• Ensuring secure data management across all environments in line with GDPR requirements.
• Monitoring and reporting security performance, driving improvements against agreed security metrics.
• Leading vulnerability management, patching, penetration testing and remediation activity.
• Working with Legal, Audit, Sales and wider business teams to ensure customers, suppliers and vendors meet IT security requirements.
• Developing and delivering security policies, procedures, guidance and awareness initiatives for colleagues across the organisation.
• Partnering with Learning & Development to deliver engaging, effective and ongoing security awareness programmes.
• Managing the IT security budget and supporting investment decisions that strengthen Rexel’s security capability.
• Building effective relationships with Group Technology, third-party providers, vendors and strategic partners.
• At Rexel, we prioritise hiring individuals based on behaviours and potential, rather than requiring specific formal qualifications for roles, the behaviours that will set you up for success as our IT Security Manager include: COLLABORATION: Building partnerships and working collaboratively with others to achieve shared objectives TAKES ACCOUNTABILITY: Taking action, overcoming obstacles, and meeting commitments CUSTOMER FOCUS: building strong customer relationships and delivering customer-centric solutions
• Security incidents, vulnerability management, patching or penetration testing.
• Working with third-party technology suppliers and partners.
• Explaining technical risks and recommendations clearly to a range of audiences.
• This is a key role within our IT function, responsible for protecting our systems, data, colleagues and customers through robust security controls, effective risk management and a security-by-design approach.
• You will work closely with colleagues across the business, Group Technology teams and external partners to ensure our security standards meet regulatory requirements, industry best practice and business needs.

Requirements

• We are particularly interested in people who can bring sound judgement, curiosity, a collaborative approach and a commitment to continuous improvement.
• Security controls across infrastructure, cloud platforms, applications or data environments.
• Delivering security awareness, guidance or training.
• Working in a fast-paced environment where priorities can change.

Preferred

• You may have experience in some of the following areas: IT security, cyber security, technology risk, privacy, governance or compliance.
• Cyber Essentials, GDPR, PCI DSS, ISO standards or other security frameworks.

You do not need to meet every requirement to apply.