IT & Cyber Security Lead

Job Title: IT & Cyber Security Lead
Department: Technology
Reports To: Chief Technology Officer (CTO)
Location: London UK (Hybrid: 3 Days in Office)
Employment Type: Permanent

About i-media
i-media is an intelligent motoring media network powered by data insights and pioneering technology. We offer advertisers access to an attractive media-starved audience via full-motion DOOH experiential and in-app advertising solutions. A multi-layered communication platform delivering both broadcast and targeted audiences through the intelligent use of data and analytics i-media is on a mission to digitise and redefine how brands connect with on-the-go motorists.

Role Overview
Were looking for an IT & Cyber Security Lead to own and strengthen i-medias cyber security posture and IT governance framework reducing risk and ensuring compliance while enabling the business to move fast. Youll bring senior oversight to our day-to-day IT operations alongside our IT Support Technician and act as the internal lead managing relationships with our external specialist providers for penetration testing and network security.

Youll work closely with our CTO to embed a security-first culture across the business - setting policy driving governance and making sure the practicalities of access devices and monitoring hold up under scrutiny.

This is a great opportunity if youre a security-minded technologist whos equally comfortable setting strategy and getting hands-on with the stakeholder skills to bring the wider team along with you.

Key Responsibilities

• Strategy & Governance
  • Lead cyber security strategy and governance aligning policy with best practice (e.g. ISO 27001 GDPR)
  • Document and maintain security processes and IT policies supporting business continuity and audit requirements
• Security Operations
  • Maintain and enforce IT security frameworks including access controls MFA device encryption patch management and monitoring tools
  • Oversee endpoint and infrastructure security controls ensuring antivirus firewalls and updates are consistently applied
  • Manage incident response acting as first point of escalation for security breaches or data loss events supported by external specialists
• Vendor & Risk Management
  • Coordinate vulnerability assessments and penetration testing with external vendors ensuring findings are actioned
  • Monitor and report on security risks and compliance gaps with remediation progress reported to the CTO
• Culture & Collaboration
  • Deliver staff security training and awareness campaigns embedding security-first practices business-wide
  • Support day-to-day IT operations in partnership with the IT Support Technician ensuring smooth onboarding offboarding and operational resilience

Skills & Experience

Essential

• Proven experience in IT security cyber security administration or infrastructure oversight
• Knowledge of security frameworks and regulatory requirements (ISO 27001 Cyber Essentials GDPR)
• Hands-on technical capability across endpoint/device management identity and access management and SaaS security controls
• Strong stakeholder management with the ability to train influence and embed governance processes

Desirable

• Experience within an SME or high-growth environment ideally with cloud-first architecture (Microsoft 365 stack)
• Exposure to working with external penetration testers MSPs or SOC teams

Attributes & Ways of Working

• Risk-aware and proactive with strong governance instincts
• Confident communicator who can translate technical risk into plain language for leadership
• Collaborative hands-on and comfortable owning outcomes end-to-end

What We Offer:

• Competitive salary with benefits package
• Workplace pension
• Monthly socials and collaborative team culture
• Healthcare Cash Plan & free monthly 1-to-1 therapy sessions
• Cycle2Work Scheme
• Enhanced holiday allowance
• Gym contribution
• Hybrid working (3 days in the office)
• Opportunities for growth training and career progression

Equal Opportunities:
Were committed to building an inclusive workplace and welcome applications from all backgrounds. Diversity drives innovation and we do not discriminate based on race gender age disability religion or sexual orientation.

Data Privacy:
By applying you consent to i-media processing your personal data for recruitment purposes in line with UK GDPR regulations.

Required Experience:

Senior IC