and take action, as and when needed. Assist in the creation, implementation, and maintenance of cybersecurity policies and procedures. Manage annual network penetration tests, CyberEssentials SAQ and CyberEssentials+, support ISMS control design, and drive compliance with relevant security frameworks. Represent the company in customer meetings and at events as appropriate. Lead and mentor colleagues in cybersecurity practices, create and manage More ❯
business supporting delivery outcomes for all stakeholders and customers. Responsibility for infrastructure development and continuous improvement including updating policies, procedures, controls and guidelines for Information Security. Maintaining the InformationSecurityManagementSystem, including supporting internal & external audits for ISO 27001 and Cyber Essentials Plus. Proactively identifying IT needs, proposing solutions and acting on them. Identifying risks and taking steps to More ❯
Team’ and cross-functional departments to ensure euNetworks is compliant with regulatory requirements and protected from evolving threats. What will you be doing? Maintain the InformationSecurityManagementSystem (ISMS) in accordance with ISO 27001 Analyse and evaluate internal projects to identify risks and define appropriate compensatory measures Conduct internal audits to ensure compliance with applicable standards and to identify … e.g., ISO 27001, US NIST, etc.) and the ability to assess risks, identify vulnerabilities, etc. Familiarity with data privacy legislation such as GDPR Experience maintaining and auditing InformationSecurityManagement Systems (ISMS) in line with ISO 27001 Customer service-oriented with the ability to build strong relationships with internal stakeholders Analytical and creative thinking skills, with the ability to identify More ❯
Bank in Central London. The InformationSecurity Manager will be responsible for day-to-day tasks related to informationsecuritymanagement, including implementing and maintaining InformationSecurityManagement Systems (ISMS), ensuring cybersecurity and network security, and protecting sensitive information. This is a hybrid role, based in London with the flexibility for some remote work. Qualifications InformationSecurityManagement, ISMS, and … Cybersecurity skills Network Security and InformationSecurity knowledge Experience in implementing and maintaining ISMS Proficient in identifying and addressing informationsecurity vulnerabilities Strong analytical and problem-solving skills Excellent communication and interpersonal skills Certifications such as CISSP, CISM, or equivalent are preferred Bachelor's degree in InformationSecurity, Computer Science, or related field InformationSecurity Manager role (permanent) reporting into More ❯
of digital assets? Holland & Barrett, a leading health and wellness retailer, is seeking a dynamic and experienced InformationSecurity Manager to join our team. Responsibilities: InformationSecurityManagementSystem (ISMS): Develop, implement, and continuously refine an ISMS aligned with business goals and ISO27001 standards. Play a pivotal role in the ISO27001 roadmap, ensuring adherence to industry best practices. Security Governance More ❯
Altrincham, England, United Kingdom Hybrid / WFH Options
Heywood
as developing supporting policies and procedures required to meet the strategy Develop, maintain, and expand the Cyber Risk Management Framework as part of the overall InformationSecurityManagementSystem (“ISMS”) Responsible for the Company’s informationsecurity capabilities, including the technical training and awareness of colleagues, ensuring it remains prepared against an ever-changing threat landscape Work with the other More ❯
Manchester, England, United Kingdom Hybrid / WFH Options
JR United Kingdom
as developing supporting policies and procedures required to meet the strategy Develop, maintain, and expand the Cyber Risk Management Framework as part of the overall InformationSecurityManagementSystem (“ISMS”) Responsible for the Company’s informationsecurity capabilities, including the technical training and awareness of colleagues, ensuring it remains prepared against an ever-changing threat landscape Work with the other More ❯
of emerging risks and regulations, ensuring our platform is resilient, secure, and trusted by every customer and supplier. A typical day: Develop and own our InformationSecurityManagementSystem (ISMS) aligned with ISO 27001 Maintain security policies, control frameworks, and ensure compliance with UK GDPR, Cyber Essentials Plus, PCI-DSS, and DPA Conduct risk assessments, manage our risk register, and More ❯
Altrincham, England, United Kingdom Hybrid / WFH Options
Heywood Limited
as developing supporting policies and procedures required to meet the strategy Develop, maintain, and expand the Cyber Risk Management Framework as part of the overall InformationSecurityManagementSystem (“ISMS”) Responsible for the Company’s informationsecurity capabilities, including the technical training and awareness of colleagues, ensuring it remains prepared against an ever-changing threat landscape Work with the other More ❯
others in Digital Services and the wider organisation to ensure appropriate leadership and accountability in the security space. The role-holder will engage with our parent company, ensuring our ISMS aligns with their prescribed standards and frameworks, as well as discussing, analysing, planning and executed any required changes and improvements in our InformationSecurity Systems. We are keen to hear More ❯
presentation of our GRC activities to internal and external stakeholders, ensuring transparency and accountability. Collaborate with cross-functional security teams to maintain and communicate our InformationSecurityManagementSystem (ISMS). Maintain clear and accurate GRC documentation. Drive continuous improvement in our GRC processes, ensuring they meet regulatory expectations. Provide strategic insights to senior leadership, enabling data-driven decision-making More ❯
London, England, United Kingdom Hybrid / WFH Options
Story Terrace Inc
The opportunity We’re looking for an InformationSecurity Manager to take ownership of Attest’s security posture as we scale. Our consumer research platform helps brands make better decisions,keeping our data, people, and customers secure is critical to More ❯
and deliver value through security advisory services and secure transformational delivery engagements Provide expertise on security standards and certifications, measure and control security controls effectiveness, and maintain the InformationSecurityManagementSystem Develop and deliver SecurityManagement Plans incorporating regulatory, legal, and compliance considerations Identify and analyze cyber security vulnerabilities and threats, leading risk mitigation plans Work with Service ManagementMore ❯
successful delivery of initiatives and projects within the Risk and Compliance environment Addressing findings from risks or audits Maintaining an accurate record of risks, events, and issues in the ISMS Supporting internal and external audit investigations Ensuring audit activities are conducted according to standards Working independently with clearly defined processes Using performance metrics to improve output Providing out-of-hours More ❯
successful delivery of initiatives and projects within the Risk and Compliance environment Addressing findings from risks or audits Maintaining an accurate record of risks, events, and issues in the ISMS Supporting internal and external audit investigations Ensuring audit activities are conducted according to standards Working independently with clearly defined processes Using performance metrics to improve output Providing out-of-hours More ❯
at times compliance requirements through Assessments, Design reviews and Upgrades. This role requires a deep understanding of GRC cybersecurity, with secondary skills in a Domain area of cyber securityISMS, whilst working with cross-functional teams to enhance the security posture of clients Cyber Security strategy at both an operational and tactical level, as well as Enterprise. You will guide More ❯
Work. Life. Smarter. Our commitment to a flexible and hybrid working culture As a GRC Analyst you will: Support the development and maintenance of our InformationSecurityManagementSystem (ISMS) including policies, objectives, and risk assessments Assist with internal audits and help prepare for external audits to maintain compliance with ISO27001 and other standards Help identify and assess informationsecurity … risks, working closely with the Cyber Risk Manager Provide guidance to colleagues on basic security best practices and requirements Contribute to reporting on the ISMS performance and improvement plans Support continual improvement initiatives and track progress Keep up to date with key trends and changes in informationsecurity and ISO standards Help maintain and update the security controls library What More ❯
Winchester, Hampshire, United Kingdom Hybrid / WFH Options
Arqiva
Work. Life. Smarter. Our commitment to a flexible and hybrid working culture As a GRC Analyst you will: Support the development and maintenance of our InformationSecurityManagementSystem (ISMS) including policies, objectives, and risk assessments Assist with internal audits and help prepare for external audits to maintain compliance with ISO27001 and other standards Help identify and assess informationsecurity … risks, working closely with the Cyber Risk Manager Provide guidance to colleagues on basic security best practices and requirements Contribute to reporting on the ISMS performance and improvement plans Support continual improvement initiatives and track progress Keep up to date with key trends and changes in informationsecurity and ISO standards Help maintain and update the security controls library What More ❯
committee whereby you are empowered to contribute and drive efficiencies and excellence in your department. You will act as the custodian around international standard for informationsecuritymanagement systems (ISMS) framework. You will be eligible for Insurance, Health and wellbeing, professional support and diversity programmes. Purpose of Job Head of Technology and Data will combine the responsibilities of BGIS operational More ❯
InformationSecurity Manager with 2nd and 3rd Line IT support experience. The role involves day-to-day tasks associated with planning, implementing, and maintaining an InformationSecurityManagementSystem (ISMS), including managing cybersecurity risks, implementing network security measures, and ensuring compliance with industry standards. The InformationSecurity Manager will also provide IT support to the company and will be based … include 2nd and 3rd line infrastructure support where you are able to advise and direct the technical team. Qualifications Experience in InformationSecurityManagement and creating and implementing an ISMS Experience in Cybersecurity and Network Security Expertise in Informationsecurity best practices and standards Excellent problem-solving skills and attention to detail Strong communication and collaboration skills Bachelor's or More ❯
London, England, United Kingdom Hybrid / WFH Options
ZipRecruiter
Description Role Overview We're looking for a pragmatic, risk-focused InformationSecurity Manager to work within Nest and maintain our ISO 27001 certified corporation InformationSecurityManagementSystem (ISMS). We sit in the second line of defence and advise the business on security risks, incidents, audits, assurance, and the implementation and monitoring of security controls that protect Nest. … in informationsecuritymanagement systems, technology, and love communicating technical concepts to non-technical people. Please note the minimum criteria for this role is: Practical experience of operating certified ISMS using ISO 27001/2, NIST CSF, and other security standards in the design and management of informationsecurity controls. Practical experience working with third-party suppliers to audit and More ❯
London, South East, England, United Kingdom Hybrid / WFH Options
Precise Placements
hands-on experience in information risk management, policy compliance, ISO 27001 , and client security due diligence . Key Responsibilities: Maintain and evolve the firm’s InformationSecurityManagementSystem (ISMS) and associated documentation Support audits and ensure security practices align with industry standards (e.g., ISO 27001, Cyber Essentials) Assist with Business Continuity Management (BCM) - including BIAs, BCPs, exercises, and training More ❯
London, England, United Kingdom Hybrid / WFH Options
Nest Corporation
Role Overview We're looking for a pragmatic, risk focussed InformationSecurity Manager to work within Nest and maintain our ISO 27001 certified corporation InformationSecurityManagementSystem (ISMS). We sit in the second line of defence and advise the business on security risks, incidents, audits, assurance and the implementation and monitoring of security controls that protects Nest. You … as part of the second line of defence in the Risk and Compliance directorate. It is accountable for the development, implementation and on-going maintenance of the ISMS (InformationSecurityManagementSystem) processes across Nest Corporation and the Scheme Arrangement outsourced providers in alignment with ISO27001. The InformationSecurity Manager - Corporation reports into the Head of InformationSecurity and is … responsible for ensuring that Nest's InformationSecurityManagementSystem is operated for the Corporation, enabling the first line business teams to deliver business objectives in line with the agreed risk appetite. This role will work across all internal Nest departments, programmes, projects and initiatives, providing oversight, support and challenge. Organisational Overview Nest is an award-winning workplace pension scheme More ❯
Sales Team to identify additional opportunities in customer organisations Research a wide variety of cybersecurity fields Finalize reports and engagements in a timely fashion Proven experience with one InformationSecurityManagementSystem (COBIT, ISO 27001) InformationSecurity Consultants are expected to be travelling approximately 20% of the time. An InformationSecurity or Information Technology-related qualification or a number of … Programs assessment. Must Have Certifications (At least One from each group below) InformationSecurity: CISSP, CISM, ISO 27001 LI, RISS Audit: CISA, GSNA, ISO 27001 LA/IA, IRCA ISMS Auditor, IIA CIA Having a MSc in InformationSecurity, or equivalent educational experience One of the following certifications: CSSLP, CASE, GSSP, GWEB, CEH, OSCP, PenTest+ or GPEN Apply for InformationMore ❯
London, England, United Kingdom Hybrid / WFH Options
RecruitMe
EV chargepoints. In this role, you’ll help safeguard the digital infrastructure that powers critical environmental innovation. What You’ll Do: Manage and support the InformationSecurityManagementSystem (ISMS) across the group and its subsidiaries Ensure compliance with leading frameworks: ISO27001, Cyber Essentials Plus, and NIST CSF Coordinate responses to customer and supplier audits, ensuring follow-up actions are More ❯