Operational Security Manager (UK)

Iron Mountain is recruiting an Operational Security Manager to strengthen our Information Security team in the United Kingdom. In this pivotal role, you will safeguard our UK Government environment against evolving threats whilst maintaining rigorous compliance with government regulations and customer security requirements.

The Opportunity

Join Iron Mountain's Information Security team as an Operational Security Manager and take ownership of security governance across our UK Government operations. We serve customers globally, preserving their most critical records, managing data centres, and safeguarding digital assets through innovative, sustainable solutions. This full-time position places you at the heart of compliance, risk management, and incident response—partnering with senior stakeholders to ensure our UK operations exceed the exacting security standards our customers demand.

What You'll Do

• Monitor and interpret UK Government security regulations affecting our data centres and information management operations, ensuring all controls remain current and defensible.
• Lead compliance initiatives across IT Health Check, Cyber Essentials, and Cyber Essentials+ frameworks, coordinating with Information Security, Enterprise IT, and business teams to maintain governance standards.
• Evaluate new and existing customer security requirements against our control environment, recommend enhancements, and draft bespoke contract security terms for alignment.
• Produce regular compliance and security incident reports for customers, translating complex technical controls into clear, actionable business language.
• Support the Cyber Incident Response team with assured communications and assurance activities during critical security incidents.

Qualifications

• UK Citizenship and SC Clearance (or demonstrated eligibility to obtain it)—mandatory for this government-facing role.
• Proven experience working within UK Government security compliance frameworks, including IT Health Check, Cyber Essentials, and Cyber Essentials+.
• Deep knowledge of UK Government security regulations and the protection of physical and logical data security for government environments.
• Strong communication capabilities, particularly in crafting customer-facing reports and stakeholder engagement on security matters.
• Bachelor's degree or equivalent professional experience in information security, compliance, or risk management. Preferred certifications include CISSP, CAP, CCSP, or CISM.

Working at Iron Mountain

Iron Mountain is a global leader in records and information management, digital transformation services, data centres, asset lifecycle management, and secure storage logistics. We serve customers worldwide, helping them preserve invaluable assets, extract greater value from their inventory, and protect data privacy through responsible, innovative solutions. Joining our Information Security team means advancing your expertise within a culture that welcomes diverse perspectives and unique contributions. We offer competitive compensation aligned with your professional experience, comprehensive health and wellness benefits, retirement plans, and genuine opportunities for continuous learning and career progression in a truly international organisation.

Applying for This Role

To apply, complete your application directly on this page, or you'll be redirected to the employer's application platform to finish submitting there.