Information Security & Integrity Manager

What you will be doing

• Establish and maintain the organisation’s Cyber and Resilience Strategy
• Translate organisational needs into a coherent data security and lifecycle governance model
• Define security requirements for Business Continuity and Disaster Recovery
• Work with data owners and engineering teams to embed a culture of data literacy
• Ensure CAB/change includes security readiness criteria
• Maintain evidence packs and ISO/QMS artefacts with the Business Management Unit
• Maintain visibility of organisational data assets through evidence-based mapping
• Implement data quality assurance checkpoints in collaboration with Data Engineering
• Build strong working relationships across Technology and Insight service areas, Corporate PMO, Service Desk, suppliers, and operational teams and technical teams
• Act as a coordinator for the WMCA’s formal liaison with national and regional authorities
• Drive continuous improvement in operational processes

• Running an ISMS and aligning to ISO 27001 in a complex, multi-supplier environment
• Establishing policies, MSBs, risk registers, DPIAs, and supplier security
• CISSP/CISM or ISO 27001 Lead Implementer/Lead Auditor (or equivalent)
• Training or certification in data governance, data quality management, or metadata management (e.g., DCAM, CDMP, DAMA DMBoK-aligned training)
• Experience of working in Agile, Lean or Dev Ops-aligned delivery practices (e.g., Kanban, flow metrics, sprint planning, CI/CD awareness)
• Experience working with CABs, release cycles or readiness reviews
• Experience assuring or governing data pipelines, data flows, integrations or data processing environments
• Experience implementing or overseeing data lifecycle governance, including classification, retention, minimisation and defensible deletion
• Experience working with Microsoft Purview, M365 compliance tooling or equivalent enterprise governance platforms
• Strong knowledge of UK GDPR/DPA 2018, ISO 27001, NCSC guidance
• Strong risk and assurance capability

The location for this role is 16 Summer Lane with at least 2 days a week spent in the office.

Your uploaded CV won’t be visible after submission. Our process is anonymised, and only the information in your profile is used for shortlisting. Be thorough in each section. It’s your chance to showcase your skills and experience.

We cannot stop anyone from using AI to help write application content. Used right, it can be a great tool. If you choose to use AI, then use it as a helper rather than relying on it wholly to write your application.

Applications that rely too heavily on AI may be rejected during shortlisting. For help on how to write a supporting statement, please visit the FAQs section of our careers site.

If you have an accessibility need, disability, or condition that means you might require changes to the application or recruitment process, please get in touch with our Recruitment Team ().

We advertise salary ranges, with new appointments typically starting at the lowest salary point. In exceptional cases, the salary point may be adjusted to secure the best candidate. This approach allows for potential year-on-year salary increases, offering progression and appropriate rewards to employees. Requests for salaries above the maximum advertised range will not be considered.

We offer a comprehensive benefits package that includes:

• Local Government Pension Scheme (one of the most generous pension schemes in the UK).
• Shared Cost Additional Voluntary Contribution scheme where you can build an additional pot of money alongside your pension with contributions exempt from Income Tax and National Insurance contributions (NICs).
• 28 days paid annual leave (with an option to purchase more) + Statutory days.
• EV car benefit…