Information Security Manager

<p class="text-muted mb-3">We are looking for an experienced and proactive Information Security Manager to join our Group IT function in London.</p>

<p class="text-muted mb-3">This is an excellent opportunity for an information security professional to play a key role in protecting a global business, strengthening security governance and ensuring compliance with industry standards and regulatory</p>

<h5 class="fw-bold text-success mt-4 mb-3">requirements.</h5>

<p class="text-muted mb-3">Working closely with the Senior Information Security Manager, Cyber Security Manager and wider business, you will take ownership of information security policies, risk management, data protection and business continuity.</p>

<p class="text-muted mb-3">You will play a hands-on role in embedding security into everyday business processes, improving compliance and promoting a strong security-aware culture across the organisation.</p>

<h5 class="fw-bold text-success mt-4 mb-3">Key Responsibilities</h5>

<p class="text-muted mb-3">Develop, implement and maintain information security policies, procedures and governance frameworks.</p>

<p class="text-muted mb-3">Manage information security risks, maintain the risk register and oversee remediation activities.</p>

<p class="text-muted mb-3">Ensure compliance with ISO 27001, GDPR and Cyber Essentials Plus, alongside relevant contractual and regulatory</p>

<h5 class="fw-bold text-success mt-4 mb-3">requirements.</h5>

<p class="text-muted mb-3">Conduct risk assessments, internal audits, compliance reviews and Data Protection Impact Assessments (DPIAs).</p>

<p class="text-muted mb-3">Support the management of security incidents, business continuity planning and incident response exercises.</p>

<p class="text-muted mb-3">Maintain ISO 27001 documentation, including the Statement of Applicability, and coordinate internal and external audits.</p>

<p class="text-muted mb-3">Work closely with Cyber Security, Group IT, HR and external service providers to assess risks and implement effective security controls.</p>

<p class="text-muted mb-3">Provide security guidance to stakeholders, customers and project teams, ensuring security</p>

<h5 class="fw-bold text-success mt-4 mb-3">requirements are embedded into new and existing services.</h5>

<p class="text-muted mb-3">Promote security awareness through training, onboarding and ongoing knowledge sharing.</p>

<p class="text-muted mb-3">Produce regular management reports and executive updates on security performance, risks and compliance.</p>

<p class="text-muted mb-3">Manage security-related projects and continuous improvement initiatives, ensuring timely delivery and successful adoption.</p>

<p class="text-muted mb-3">Support the Data Protection Officer with data protection matters, including Data Subject Access Requests where required.</p>

<h5 class="fw-bold text-success mt-4 mb-3">About You</h5>

<p class="text-muted mb-3">You will be a commercially aware and solutions-focused information security professional with the confidence to engage stakeholders at all levels. You will combine strong technical understanding with excellent governance, risk and compliance expertise, taking a pragmatic approach to managing risk and improving security across the business.</p>

<p class="text-muted mb-3">You will also bring:</p>

<p class="text-muted mb-3">At least 3 years' experience in IT operations and 3 years' experience within an enterprise information security environment.</p>

<p class="text-muted mb-3">At least 5 years' experience working with Microsoft information security tools, with evidence of improving compliance.</p>

<p class="text-muted mb-3">At least 3 years' experience maintaining an information security-accredited environment, including ISO 27001 and Cyber Essentials Plus.</p>

<p class="text-muted mb-3">Strong knowledge of information security governance, risk management, data protection and compliance.</p>

<p class="text-muted mb-3">Experience working with technical and cyber security teams to assess risks and deliver remediation plans.</p>

<p class="text-muted mb-3">The ability to manage multiple projects, priorities and change initiatives simultaneously.</p>

<p class="text-muted mb-3">Excellent communication, analytical, problem-solving and stakeholder management skills.</p>

<h5 class="fw-bold text-success mt-4 mb-3">A strong customer-focused approach, with the ability to explain security requirements clearly to both technical and non-technical audiences.Technical Skills & Qualifications</h5>

<p class="text-muted mb-3">Experience with the following tools and technologies would be beneficial:</p>

<p class="text-muted mb-3">Microsoft Purview, Entra ID and Microsoft Defender Security.</p>

<p class="text-muted mb-3">Cyera and Microsoft Copilot.</p>

<p class="text-muted mb-3">Microsoft Word, Excel and Outlook.Relevant qualifications or equivalent practical knowledge are expected, including Microsoft Information Protection or Compliance products and ITIL Foundation. ISO 27001 Foundation, Auditor or Implementer qualifications, alongside CISSP or CISM, would be advantageous</p>