Information Security Lead

<p class="text-muted mb-3">INFORMATION SECURITY LEAD (GRC)</p>

<p class="text-muted mb-3">Bedford | Hybrid – 1 / 2 Days Office per week</p>

<p class="text-muted mb-3">£60,000 – £70,000 + Excellent Benefits | Permanent</p>

<p class="text-muted mb-3">GRC | ISO 27001 | ISMS | Security Audits | Risk Management | Cyber Security | Information Security</p>

<p class="text-muted mb-3">Are you an experienced Information Security / Cyber Security professional with strong hands-on GRC, ISO 27001 and Security Audit experience, combined with a technical understanding of Cyber Security?</p>

<p class="text-muted mb-3">We're recruiting an Information Security Lead / Cyber Security Lead for a leading international SaaS software business, offering the opportunity to take greater ownership across Information Security, GRC, Security Governance, Risk, Compliance and Cyber Security.</p>

<p class="text-muted mb-3">Strong GRC and audit experience is essential. We're looking for someone who understands how to operate and improve an ISMS, support ISO 27001, manage security risk and controls, and work confidently across internal audits, external certification audits, customer assurance and supplier security.</p>

<p class="text-muted mb-3">Ideally, you'll have developed your career from an IT, Infrastructure, Network or technical Cyber Security background before moving into broader Information Security and GRC.</p>

<p class="text-muted mb-3">THE ROLE</p>

<p class="text-muted mb-3">You'll work closely with the Head of Information Security, helping maintain and continually improve the organisation's Information Security, GRC and compliance environment.</p>

<p class="text-muted mb-3">Your remit will include ISO 27001, ISMS, security audits, risk assessments, policies and controls, customer assurance, supplier security and audit remediation, alongside Cyber Essentials and wider certification activities.</p>

<p class="text-muted mb-3">You'll also work closely with technical teams across vulnerability management, patching, penetration testing, incident response, Business Continuity and Disaster Recovery, ensuring security risks and audit findings translate into practical improvements.</p>

<p class="text-muted mb-3">SKILLS & EXPERIENCE</p>

<p class="text-muted mb-3">We're particularly interested in strong experience across:</p>

<p class="text-muted mb-3">• GRC & Security Governance: ISO 27001, ISMS, Risk Management, Security Policies, Controls, Compliance and Information Security Governance.</p>

<p class="text-muted mb-3">• Security Audits & Assurance: Internal Audits, External Audits, Certification Audits, Audit Evidence, Remediation, Customer Assurance and Supplier Assurance.</p>

<p class="text-muted mb-3">• Cyber Security: Vulnerability Management, Penetration Testing, Patch Management, Incident Response and Security Controls.</p>

<p class="text-muted mb-3">• Resilience & Compliance: Cyber Essentials, Business Continuity, Disaster Recovery, DPIAs, BIAs and Third-Party Risk.</p>

<p class="text-muted mb-3">You'll ideally have 5+ years' experience across Information Security, Cyber Security, GRC, IT Risk, Compliance or Security Assurance.</p>

<p class="text-muted mb-3">You don't necessarily need to already be an Information Security Manager. We'd also like to hear from Information Security Leads, GRC Leads, Senior Information Security Analysts, Senior Cyber Security Analysts, Information Security Consultants, IT Risk & Compliance professionals and Security Engineers who have developed substantial GRC and audit experience.</p>

<p class="text-muted mb-3">THE BALANCE WE'RE LOOKING FOR</p>

<p class="text-muted mb-3">This is not a purely technical Security Engineering position.</p>

<p class="text-muted mb-3">The strongest candidates will bring genuine GRC, ISO 27001 and audit experience, but also enough technical understanding to work credibly with Infrastructure, IT Operations and Software Engineering teams.</p>

<p class="text-muted mb-3">You'll be equally comfortable discussing audit findings, risk and ISO 27001 controls with senior stakeholders as you are working with technical teams on vulnerabilities, remediation and security improvements.</p>

<p class="text-muted mb-3">WHY CONSIDER IT?</p>

<p class="text-muted mb-3">A great opportunity to join a leading international SaaS software business and take broader ownership across Information Security, GRC, Audit and Cyber Security.</p>

<p class="text-muted mb-3">£60,000 – £70,000 + Excellent Benefits</p>

<p class="text-muted mb-3">Bedford | Hybrid – 3 Days Office / 2 Days Remote</p>

<p class="text-muted mb-3">If you have strong GRC + ISO 27001 + Security Audit + Information Security experience, combined with a good technical security foundation, we'd like to hear from you.</p>

<p class="text-muted mb-3">Apply today for a confidential discussion.</p>

<p class="text-muted mb-3">KEY SKILLS:</p>

<p class="text-muted mb-3">Information Security Lead, Cyber Security Lead, Information Security Manager, GRC, GRC Lead, Information Security, Cyber Security, ISO 27001, ISMS, Information Security Management System, Security Audit, Internal Audit, External Audit, Certification Audit, Security Governance, Risk Management, Compliance, Security Controls, Audit Remediation, Customer Assurance, Supplier Assurance, Third Party Risk, Cyber Essentials, Vulnerability Management, Penetration Testing, Incident Response, Business Continuity, Disaster Recovery, DPIA, BIA, Infrastructure Security, Network Security</p>