Information Security & Data Privacy Manager

InforSec & Data Privacy Manager – 6-month Contract to Permanent – London (Hybrid)

We are supporting a high-growth WealthTech platform in hiring an Information Security & Data Privacy Manager on an initial 6-month contract, with a clear pathway to a permanent role.

This is an interim hire due to confidentiality, sitting directly with the COO, responsible for owning the organisation’s information security, data privacy and compliance framework across both on-premise and SaaS environments.

The role requires an individual who has operated in similar financial services or regulated technology environments, with hands-on ownership of ISO, SOC2, and audit processes.

Key Responsibilities

• Own and maintain the Information Security Management System (ISMS), ensuring ongoing compliance and maturity
• Lead ISO 27001 and SOC2 certification processes, including audits, renewals, and continuous improvement
• Define and implement information security policies, governance frameworks, and controls across the business
• Act as the primary point of contact for all security, compliance, and audit-related activities
• Partner with engineering, infrastructure, and operations teams to ensure security is embedded across both on-prem and SaaS platforms
• Manage third-party security providers and ensure alignment with internal standards
• Establish and maintain incident response, risk management, and business continuity frameworks
• Drive data privacy initiatives, ensuring compliance with GDPR and relevant regulatory requirements
• Build reporting frameworks and dashboards for leadership visibility on risk, compliance, and security posture
• Engage with senior stakeholders to influence security strategy and decision-making

Requirements

• Proven experience in an Information Security/Data Privacy Manager role within financial services, FinTech, or regulated SaaS environments
• Hands-on experience maintaining ISO 27001 and SOC2 certifications, including audit ownership
• Strong understanding of ISMS frameworks, risk management, and security governance
• Experience working across both on-premise and SaaS software environments
• Practical experience implementing security controls alongside engineering and infrastructure teams
• Strong knowledge of data privacy regulations (e.g., GDPR) and their application within technology platforms
• Experience managing third-party security vendors or SOC providers
• Ability to operate in a hands-on capacity, not purely advisory or oversight
• Strong stakeholder management, with experience working closely with senior leadership

Additional Information

• Initial 6-month contract (outside IR35) with a clear route to permanent
• Role is confidential at this stage; full company details shared upon interview request
• Hybrid working: London office, 2–3 days per week
• Immediate start