Information Security Manager

Information Security Manager

We’re looking for an experienced Information Security Manager to strengthen and continually improve our information security, governance and compliance environment.

A key focus of the role will be supporting and maintaining an ISO 27001-certified Information Security Management System (ISMS), alongside wider risk, compliance and assurance activities.

The Role

• Maintain and continually improve the ISO 27001 ISMS, policies, controls and supporting processes
• Support ISO 27001 audits, certification activities and customer assurance requests
• Manage information security risks, DPIAs, supplier assessments and corrective actions
• Coordinate security incidents, business continuity and disaster recovery activities
• Support vulnerability management, penetration testing and remediation
• Maintain compliance with ISO 9001, Cyber Essentials / Cyber Essentials Plus and relevant regulatory requirements
• Provide practical security guidance to technical and business teams
• Drive security awareness, continual improvement and a strong culture of compliance

About You

You’ll have 5–8 years’ experience across information security, cyber security, governance, risk or compliance, with strong practical experience of ISO 27001 and ISMS requirements.

You’ll be confident working with both technical and non-technical stakeholders, managing risk and audit activities, and translating security requirements into practical and effective controls.

Key Skills:

ISO 27001 | ISMS | Information Security | Risk Management | Audit & Assurance | Supplier Security | Incident Management | Business Continuity | Vulnerability Management | Compliance

If you’re looking for your next opportunity to take ownership of information security, governance and compliance, we’d be keen to hear from you.