Information Security Manager - HYBRID
We are seeking an experienced Information Security Manager to strengthen and continually improve our information security, governance and compliance environment.
A key focus of the role will be supporting and maintaining an ISO 27001-certified Information Security Management System (ISMS), alongside broader compliance, risk and assurance activities.
Key Responsibilities- Maintain and continually improve the ISO 27001 ISMS, policies, controls and supporting processes.
- Support ISO 27001 audits, certification activities and customer assurance requests.
- Manage information security risks, DPIAs, supplier assessments and corrective actions.
- Coordinate security incidents, business continuity and disaster recovery activities.
- Support vulnerability management, penetration testing and remediation.
- Maintain compliance with ISO 9001, Cyber Essentials/Cyber Essentials Plus and relevant regulatory requirements.
- Provide practical security guidance to technical and business teams.
- Drive security awareness, continual improvement and a strong culture of compliance.
You will have 5-8 years' experience in information security, cyber security, governance, risk or compliance, with strong practical experience of ISO 27001 and ISMS requirements.
You will be confident working with technical and non-technical stakeholders, managing risk and audit activities, and translating security requirements into practical, effective controls.
Key skills: ISO 27001 | ISMS | Information Security | Risk Management | Audit & Assurance | Supplier Security | Incident Management | Business Continuity | Vulnerability Management | Compliance
Due to the volume of applications received for positions, it will not be possible to respond to all applications and only applicants who are considered suitable for interview will be contacted.
Proactive Appointments Limited operates as an employment agency and employment business and is an equal opportunities organisation
We take our obligations to protect your personal data very seriously. Any information provided to us will be processed as detailed in our Privacy Notice, a copy of which can be found on our website