Compliance Manager (Information Security)

Thrive; London; On-site; GBP 45,000 - 65,000; Full time

Job summary

A leading compliance services provider in London is seeking a Compliance Officer to manage ISO and Cyber Essentials compliance. This role involves preparing for audits, developing compliance policies, and responding to due diligence requests. The ideal candidate has 3-5 years of experience and relevant certifications. Join to ensure robust compliance practices and assist in maintaining standards.

Qualifications

• 3-5 years of experience with ISO 27001 and Cyber Essentials audits.
• Relevant industry certifications including CISSP, CISA, CISM.
• Experience with preparing for ISO and Cyber Essentials audits.

Responsibilities

• Manage ISO 27001, 9001, and 14001 certification initiatives.
• Prepare for Cyber Essentials audits.
• Develop and maintain compliance policies.

Skills

Experience with ISO 27001

Experience with Cyber Essentials

Strong written communication skills

Strong interpersonal skills

Strong organisational skills

Education

Bachelor's degree in computer science or related field

Job description

Overview

Join an experienced Compliance department to assist with Thrive’s corporate compliance requirements and initiatives. This position requires experience with UK and EU data privacy requirements, and with preparing for and leading ISO and Cyber Essentials / Cyber Essentials Plus audits. This position will serve as the local point of contact for the compliance team and manage compliance responsibilities in-region which include responding to due diligence requests, developing and maintaining policies and procedures, and participating in risk identification and management exercises.

Responsibilities

• Prepare for and manage (including interfacing with auditors) the organization’s ongoing ISO 27001, 9001, and 14001 certification initiatives.
• Prepare for and manage the organization’s Cyber Essentials and Cyber Essentials Plus audit engagements.
• Work with the wider Compliance team to develop and maintain policies and procedures and conduct internal training on compliance requirements.
• Complete due diligence questionnaires in a timely manner as requested by clients and sales / account management representatives.
• Assist with evaluating new acquisitions to determine if there are any new compliance requirements or challenges to existing requirements.
• Remain abreast of the current IT Compliance and Cyber regulatory environment to inform the business of any missing requirements.

Qualifications

• 3-5 years of experience with ISO 27001 and Cyber Essentials / Cyber Essentials Plus audits (ISO 9001 and 14001 a plus).
• Bachelors (or equivalent) degree in computer science, cybersecurity, or a related technical field.
• Relevant industry certification(s) including CISSP, CISA, CISM, CCISO, etc.
• Strong written and verbal communication skills.
• Strong interpersonal skills.
• Strong organisational skills and attention to detail.