Information Security Manager - HYBRID

Information Security Manager

We are seeking an experienced Information Security Manager to strengthen and continually improve our information security, governance and compliance environment.

A key focus of the role will be supporting and maintaining an ISO 27001-certified Information Security Management System (ISMS), alongside broader compliance, risk and assurance activities.

• Maintain and continually improve the ISO 27001 ISMS, policies, controls and supporting processes.
• Support ISO 27001 audits, certification activities and customer assurance requests.
• Manage information security risks, DPIAs, supplier assessments and corrective actions.
• Coordinate security incidents, business continuity and disaster recovery activities.
• Support vulnerability management, penetration testing and remediation.
• Maintain compliance with ISO 9001, Cyber Essentials/Cyber Essentials Plus and relevant regulatory requirements.
• Provide practical security guidance to technical and business teams.
• Drive security awareness, continual improvement and a strong culture of compliance.

You will have 5-8 years' experience in information security, cyber security, governance, risk or compliance, with strong practical experience of ISO 27001 and ISMS requirements.

You will be confident working with technical and non-technical stakeholders, managing risk and audit activities, and translating security requirements into practical, effective controls.

Key skills: ISO 27001 | ISMS | Information Security | Risk Management | Audit & Assurance | Supplier Security | Incident Management | Business Continuity | Vulnerability Management | Compliance