Operational Security Manager (UK)

At Iron Mountain we know that work, when done well, makes a positive impact for our customers, our employees, and our planet. That’s why we need smart, committed people to join us. Whether you’re looking to start your career or make a change, talk to us and see how you can elevate the power of your work at Iron Mountain.

We provide expert, sustainable solutions in records and information management, digital transformation services, data centers, asset lifecycle management, and fine art storage, handling, and logistics. We proudly partner every day with our 225,000 customers around the world to preserve their invaluable artifacts, extract more from their inventory, and protect their data privacy in innovative and socially responsible ways. 

Are you curious about being part of our growth stor​y while evolving your skills in a culture that will welcome your unique contributions? If so, let's start the conversation.

Iron Mountain is seeking an experienced Operational Security Manager to join our Information Security team. In this role, you will be responsible for ensuring that Iron Mountain’s UK Government environment remains fully aligned with UK Government regulations, corporate security policies, and specific customer requirements. You will act as a primary point of contact for compliance reporting and assurance testing while supporting our cyber incident response efforts.

What You’ll Do (Responsibilities)

In this role, you will:

• Maintain Regulatory Oversight: Stay current on all new and existing UK Government regulations concerning the physical and logical security of governmental data.
• Drive Compliance & Governance: Collaborate with Information Security, Enterprise IT, and business stakeholders to maintain ongoing compliance and ensure all security governance documentation is up to date.
• Manage Customer Requirements: Assess new and existing customer requirements against current control sets, providing recommendations and redlining contract security terms to ensure alignment.
• Reporting & Assessments: Create regular, customer-facing reports on the control environment and security incidents, and assist in the completion of detailed customer security assessments.
• Incident Support: Assist the Cyber Incident Response team with critical communications and assurance during cybersecurity incidents.

What You’ll Bring (Skills & Qualifications)

The ideal candidate will have:

• Security Clearance & Citizenship: Must be a UK Citizen and currently hold, or be capable of obtaining, UK SC Clearance.
• Proven Experience: Experience working within compliance frameworks such as IT Health Check, Cyber Essentials, and Cyber Essentials+.
• Industry Expertise: Strong knowledge of UK Government security regulations and the management of physical and logical data security.
• Communication Skills: Strong communication skills with the ability to manage customer-facing reporting and internal stakeholder alignment.
• Education & Certifications: A Bachelor’s degree or equivalent work experience. Preferred industry certifications include CISSP, CAP, CCSP, or CISM.

What We Offer (Benefits)

• Work-Life Balance: This is a remote position within the UK with travel requirements of less than 10%.
• Flexible Options: Flexible work options to support work-life balance.
• Compensation: Competitive compensation and benefits package aligned with your professional experience.
• Health & Wellness: Comprehensive health, wellness, and retirement plans.
• Growth: Opportunities for continuous learning and professional growth within a global organization.

#LI-remote