We are looking for an experienced Information Security Manager to join our Group IT team in a hands-on role focused on strengthening information security, governance, risk and compliance across the business. This is a 5-day per week office-based position in Central London, with occasional travel to other company locations as required.
The Role
You will work closely with the Senior Information Security Manager and Cyber Security Manager, taking responsibility for:
* Developing, implementing and maintaining information security policies, procedures and governance frameworks.
* Managing the security risk register, conducting risk assessments, audits and compliance testing.
* Maintaining and supporting ISO27001, GDPR and Cyber Essentials Plus compliance.
* Leading Information Security input into projects, new services and business processes, including DPIAs and security assessments.
* Managing Business Continuity and Incident Response policies, exercises and improvements.
* Delivering security projects, governance controls and ongoing improvements through to full adoption.
* Advising and educating stakeholders across the business to build a strong security-aware culture.
* Producing management information, executive reports and regular updates for senior stakeholders.
What We're Looking For
Essential experience and skills:
* 3+ years’ experience in an IT operational role.
* 3+ years’ experience within an Enterprise Information Security environment.
* 5+ years’ experience working with Microsoft Information Security tools, with demonstrable improvements to compliance posture.
* 3+ years’ experience working within an ISO27001 and Cyber Essentials Plus accredited environment.
* Strong Governance, Risk & Compliance (GRC) experience.
* Excellent analytical, troubleshooting and problem-solving skills.
* Strong leadership, communication and stakeholder-management abilities.
* Experience managing multiple projects and change initiatives concurrently.
* A strong understanding of IT service management, ideally including ITIL.
* Experience working with multiple security and technology toolsets.
Qualifications
Ideally, you will hold or have equivalent knowledge of:
* Microsoft Information / Compliance product administration
* ITIL Foundation
* Information Security certifications or training
* ISO27001 Foundation, Auditor or Implementer
* CISSP or CISM
Experience with Microsoft Purview, Cyera, Entra, Defender Security and Copilot would also be highly valuable.
If you are a proactive, pragmatic Information Security professional who can combine technical understanding with strong business and stakeholder skills, we would love to hear from you
Salary description
£50000.00 - £52000.00 per year