IT & Cyber Security Lead

Job description

Job Title: IT & Cyber Security Lead Department: Technology Reports To: Chief Technology Officer (CTO) Location: London, UK (Hybrid: 3 Days in Office) Employment Type: Permanent About i-media i-media is an intelligent motoring media network, powered by data, insights, and pioneering technology. We offer advertisers access to an attractive media-starved audience via full-motion DOOH, experiential, and in-app advertising solutions. A multi-layered communication platform delivering both broadcast and targeted audiences through the intelligent use of data and analytics, i-media is on a mission to digitise and redefine how brands connect with on-the-go motorists. Role Overview We're looking for an IT & Cyber Security Lead to own and strengthen i-media's cyber security posture and IT governance framework, reducing risk and ensuring compliance while enabling the business to move fast. You'll bring senior oversight to our day-to-day IT operations alongside our IT Support Technician, and act as the internal lead managing relationships with our external specialist providers for penetration testing and network security. You'll work closely with our CTO to embed a security-first culture across the business - setting policy, driving governance, and making sure the practicalities of access, devices, and monitoring hold up under scrutiny. This is a great opportunity if you're a security-minded technologist who's equally comfortable setting strategy and getting hands-on, with the stakeholder skills to bring the wider team along with you. Key Responsibilities Strategy & Governance Lead cyber security strategy and governance, aligning policy with best practice (e.g., ISO 27001, GDPR) Document and maintain security processes and IT policies, supporting business continuity and audit requirements Security Operations Maintain and enforce IT security frameworks, including access controls, MFA, device encryption, patch management and monitoring tools Oversee endpoint and infrastructure security controls, ensuring antivirus, firewalls and updates are consistently applied Manage incident response, acting as first point of escalation for security breaches or data loss events, supported by external specialists Vendor & Risk Management Coordinate vulnerability assessments and penetration testing with external vendors, ensuring findings are actioned Monitor and report on security risks and compliance gaps, with remediation progress reported to the CTO Culture & Collaboration Deliver staff security training and awareness campaigns, embedding security-first practices business-wide Support day-to-day IT operations in partnership with the IT Support Technician, ensuring smooth onboarding, offboarding and operational resilience Skills & Experience Essential Proven experience in IT security, cyber security administration, or infrastructure oversight Knowledge of security frameworks and regulatory requirements (ISO 27001, Cyber Essentials, GDPR) Hands-on technical capability across endpoint/device management, identity and access management, and SaaS security controls Strong stakeholder management, with the ability to train, influence and embed governance processes Desirable Experience within an SME or high-growth environment, ideally with cloud-first architecture (Microsoft 365 stack) Exposure to working with external penetration testers, MSPs, or SOC teams Attributes & Ways of Working Risk-aware and proactive, with strong governance instincts Confident communicator who can translate technical risk into plain language for leadership Collaborative, hands-on, and comfortable owning outcomes end-to-end What We Offer: Competitive salary with benefits package Workplace pension Monthly socials and collaborative team culture Healthcare Cash Plan & free monthly 1-to-1 therapy sessions Cycle2Work Scheme Enhanced holiday allowance Gym contribution Hybrid working (3 days in the office) Opportunities for growth, training, and career progression Equal Opportunities: We're committed to building an inclusive workplace and welcome applications from all backgrounds. Diversity drives innovation, and we do not discriminate based on race, gender, age, disability, religion, or sexual orientation. Data Privacy: By applying, you consent to i-media processing your personal data for recruitment purposes in line with UK GDPR regulations.