GRC & Information Security Lead | ISO 27001 Expert

NTT DATA; Birmingham; Hybrid; GBP 70,000 - 90,000; Full time

Job summary

NTT DATA is seeking an Information Security Manager/GRC Consultant in the Birmingham area on a hybrid basis. You will protect the organisation from information security threats while evolving our governance, risk, and compliance frameworks and policies.

You will work with the Information Security Steering Team and cross-functional partners to ensure regulatory compliance, manage ISMS activities, and drive improvements in security posture across the business.

Qualifications

• Significant experience in Information Security and GRC
• Strong understanding of risk management methodologies and international security standards (ISO 27001, US NIST, TSA)
• Familiarity with data privacy legislation such as EU GDPR
• Experience maintaining and auditing ISMS in line with ISO 27001
• Customer service-oriented with ability to build relationships with internal stakeholders
• Analytical and creative thinking with pragmatic solutions
• Strong organizational and delegation skills
• Fluent in English and German

Responsibilities

• Maintain the Information Security Management System (ISMS) in accordance with ISO 27001
• Conduct audits against TSA and other local/regional compliance standards
• Analyze and evaluate internal projects to identify risks and compensating controls
• Prepare and present reports on information security and areas for improvement
• Manage and update content for security awareness platform for employees and suppliers
• Research and recommend security enhancements and improvements
• Collaborate with Information Security Steering Team and cross-functional departments to ensure regulatory compliance

Skills

ISMS management

ISO 27001

GRC

Risk assessment

Stakeholder management

German language

English language

Job description

NTT DATA is seeking an Information Security Manager/GRC Consultant in the Birmingham area on a hybrid basis. You will protect the organisation from information security threats while evolving our governance, risk, and compliance frameworks and policies.

You will work with the Information Security Steering Team and cross-functional partners to ensure regulatory compliance, manage ISMS activities, and drive improvements in security posture across the business.