GRC-Driven Information Security Lead (ISO 27001)

Enorth Resourcing Limited; Bedford; Hybrid; GBP 60,000 - 70,000; Full time

Job summary

Enorth Resourcing Limited is recruiting an Information Security Lead for a leading international SaaS software business. The role focuses on GRC, ISO 27001, security governance, risk management, and audits, with hands-on security experience.

You will work with the Head of Information Security to maintain and improve ISMS, support certification activities, and drive security improvements across technical teams.

Qualifications

• Experience with ISO 27001, ISMS, Risk Management and Information Security governance.
• Experience in internal, external and certification audits and remediation.
• Strong knowledge of vulnerability management, penetration testing, patch management and incident response.
• 5+ years across Information Security, Cyber Security, GRC, IT Risk or Security Assurance.
• Ability to collaborate with Infrastructure, Networks, IT Operations and Software Engineering teams.

Responsibilities

• Maintain and improve the organisation's Information Security, GRC and compliance environment.
• Oversee ISO 27001, ISMS, security audits, risk assessments, policies and controls.
• Coordinate with technical teams on vulnerability management, remediation and security improvements.
• Communicate audit findings and controls with senior stakeholders and customers.

Skills

GRC & Governance

Security Audits

Cyber Security

Resilience & Compliance

ISO 27001

Job description

Enorth Resourcing Limited is recruiting an Information Security Lead for a leading international SaaS software business. The role focuses on GRC, ISO 27001, security governance, risk management, and audits, with hands-on security experience.

You will work with the Head of Information Security to maintain and improve ISMS, support certification activities, and drive security improvements across technical teams.