Hybrid IT Security & Compliance Manager (ISO Lead)

Scrumconnect Limited; Staines-upon-Thames; Hybrid; GBP 65,000 - 90,000; Full time

Job summary

Scrumconnect Consulting, a UK digital consultancy, is seeking a hands-on IT security/compliance professional to own ISO certifications and audits. You will maintain current standards, manage government certifications, and oversee laptop estate with a focus on audit-ready compliance.

Reporting to the Operations Manager, the role is a single-person, hybrid position based in Staines-upon-Thames with some travel to other sites.

Qualifications

• Two or more years of experience in an IT security or IT compliance role where you were the main person responsible for the work.
• Hands-on experience with ISO 27001 audits and Cyber Essentials and Cyber Essentials Plus.
• Practical administration experience with Google Workspace or Microsoft 365, an MDM platform (Intune, Jamf or similar), and endpoint protection.
• Ability to write clear policies and explain them to non-technical colleagues.
• Eligibility for Security Check (SC) clearance, as some of our government work requires it.
• ISO 27001, ISO 9001, ISO 14001 or ISO 20000-1 Lead Implementer or Lead Auditor qualifications, CISMP or Security+.
• Knowledge of UK public-sector security expectations, including NCSC guidance, ITHC and departmental supplier assurance.
• Knowledge of UK GDPR and ICO obligations, SOC 2 or supplier risk management.
• Knowledge of Home Office sponsor-licence compliance from the IT and asset management perspective.

Responsibilities

• Own ISO certifications: maintain 27001, 9001, 14001, 20000-1; run audits and reviews.
• Manage government-certifications: Cyber Essentials and ITHC/testing; close findings.
• Run compliance ops: track ICO, UK GDPR, WEEE, legal obligations.
• Perform gap and risk reviews across systems, devices, SaaS and suppliers.
• Oversee day-to-day security: endpoint protection, patching, MFA, access reviews, IR.
• Own the laptop estate: manage devices from purchase to disposal; reconcile HR headcount.
• Build awareness: run inductions, phishing tests, answer security questionnaires, BC/DR testing.

Skills

IT security

IT compliance

Audit readiness

Policy writing

Stakeholder communication

Education

ISO 27001 Lead Implementer or Lead Auditor

CISMP or Security+

Public sector security knowledge

Tools

Google Workspace

Microsoft 365

MDM (Intune/Jamf)

Endpoint protection

Job description

Scrumconnect Consulting, a UK digital consultancy, is seeking a hands-on IT security/compliance professional to own ISO certifications and audits. You will maintain current standards, manage government certifications, and oversee laptop estate with a focus on audit-ready compliance.

Reporting to the Operations Manager, the role is a single-person, hybrid position based in Staines-upon-Thames with some travel to other sites.