IT & Cyber Security Lead

Job Title: IT & Cyber Security Lead

Department: Technology

Reports To: Chief Technology Officer (CTO)

Location: London, UK (Hybrid: 3 Days in Office)

Employment Type: Permanent

About i-media

i-media is an intelligent motoring media network, powered by data, insights, and pioneering technology. We offer advertisers access to an attractive media-starved audience via full-motion DOOH, experiential, and in-app advertising solutions. A multi-layered communication platform delivering both broadcast and targeted audiences through the intelligent use of data and analytics, i-media is on a mission to digitise and redefine how brands connect with on-the-go motorists.

Role Overview

We're looking for an IT & Cyber Security Lead to own and strengthen i-media's cyber security posture and IT governance framework, reducing risk and ensuring compliance while enabling the business to move fast. You'll bring senior oversight to our day-to-day IT operations alongside our IT Support Technician, and act as the internal lead managing relationships with our external specialist providers for penetration testing and network security.

You'll work closely with our CTO to embed a security-first culture across the business - setting policy, driving governance, and making sure the practicalities of access, devices, and monitoring hold up under scrutiny.

This is a great opportunity if you're a security-minded technologist who's equally comfortable setting strategy and getting hands-on, with the stakeholder skills to bring the wider team along with you.

Key Responsibilities

Strategy & Governance

• Lead cyber security strategy and governance, aligning policy with best practice (e.g., ISO 27001, GDPR)
• Document and maintain security processes and IT policies, supporting business continuity and audit requirements

Security Operations

• Maintain and enforce IT security frameworks, including access controls, MFA, device encryption, patch management and monitoring tools
• Oversee endpoint and infrastructure security controls, ensuring antivirus, firewalls and updates are consistently applied
• Manage incident response, acting as first point of escalation for security breaches or data loss events, supported by external specialists

Vendor & Risk Management

• Coordinate vulnerability assessments and penetration testing with external vendors, ensuring findings are actioned
• Monitor and report on security risks and compliance gaps, with remediation progress reported to the CTO

Culture & Collaboration

• Deliver staff security training and awareness campaigns, embedding security-first practices business-wide
• Support day-to-day IT operations in partnership with the IT Support Technician, ensuring smooth onboarding, offboarding and operational resilience

Skills & Experience

Essential

• Proven experience in IT security, cyber security administration, or infrastructure oversight
• Knowledge of security frameworks and regulatory requirements (ISO 27001, Cyber Essentials, GDPR)
• Hands-on technical capability across endpoint/device management, identity and access management, and SaaS security controls
• Strong stakeholder management, with the ability to train, influence and embed governance processes

Desirable

• Experience within an SME or high-growth environment, ideally with cloud-first architecture (Microsoft 365 stack)
• Exposure to working with external penetration testers, MSPs, or SOC teams

Attributes & Ways of Working

• Risk-aware and proactive, with strong governance instincts
• Confident communicator who can translate technical risk into plain language for leadership
• Collaborative, hands-on, and comfortable owning outcomes end-to-end

What We Offer:

• Competitive salary with benefits package
• Workplace pension
• Monthly socials and collaborative team culture
• Healthcare Cash Plan & free monthly 1-to-1 therapy sessions
• Cycle2Work Scheme
• Enhanced holiday allowance
• Gym contribution
• Hybrid working (3 days in the office)
• Opportunities for growth, training, and career progression

Equal Opportunities:

We're committed to building an inclusive workplace and welcome applications from all backgrounds. Diversity drives innovation, and we do not discriminate based on race, gender, age, disability, religion, or sexual orientation.

Data Privacy:

By applying, you consent to i-media processing your personal data for recruitment purposes in line with UK GDPR regulations.