2 of 2 Permanent ISMS Jobs in Surrey

Analyst Operations. The aim of this role is the effective operation, reporting and evidencing of their technology and information security control environment and the overall Information Security Management System (ISMS). Based in Reigate/hybrid - 2 days in the office 3 from home £40,000 - £45,000 Hybrid Eligibility for annual bonus, up to 15% 25 days holiday per … a good working relationship with all internal and external key stakeholders, and third-party vendors. Create reports on information security projects and activities – Report on information and cyber security incidents – Create ISMS reports based on key metrics - Articulate associated risks in both technical and non-technical terminology. Support the on-going review process to continually improve and refine the ISMS … or audit function would be beneficial Experience of working in a regulated environment/awareness of requirements such as GDPR Experience in the maintenance of a certified IS027001 Information Security Management System and related controls (ISO27002) Understanding of technology and information security risk management frameworks Excellent verbal and communication skills Excellent team player who can establish strong working relationships Graduates More ❯

oversight and management of the firm's control framework relating to these speciality areas. As the Information Security Manager you will design, implement & maintain the Information Security Management System (ISMS) in accordance with ISO27001, Cyber Essential Plus & SOC2 and other relevant standards. In a travel risk management environment this role is critical for safeguarding sensitive traveller data, real-time location … before the advertised date. About the role Key Responsibilities for the Information Security Manager: Risk & Compliance Lead the development, implementation, and continuous improvement of our Information Security Management System (ISMS) in line with ISO 27001 and other regulatory standards. Assess security posture, identify vulnerabilities, and develop mitigation strategies to manage enterprise-wide information security risks. Maintain and enhance the organisation More ❯