Information Security & Assurance Lead: ISMS + ISO 27001

HPC Jobs Service; Leiston; On-site; GBP 60,000 - 90,000; Full time

Job summary

Bachy Soletanche/GSA, supporting Sizewell C, is seeking an Information Security & Assurance Officer to ensure delivery of client ISMP controls and governance across projects.

You will own the ISMS, coordinate security assessments, manage supplier security, and align with UK GDPR and NIS2 where applicable, while driving continuous improvement and security culture across the organisation.

This role is based at Sizewell C with access to modern security tooling and cross‑site collaboration.

Qualifications

• Strong knowledge of ISO/IEC 27001, Cyber Essentials Plus and data protection laws.
• Experience delivering security assurance across a UK organisation.
• Ability to produce assurance reports and executive dashboards.

Responsibilities

• Implement ISMP requirements across GSA and maintain governance docs.
• Own and operate the ISMS with policies and procedures.
• Manage security assessments, remediation actions and supplier reviews.
• Oversee O365 and core IT controls, IAM/MFA, logging and config baselines.
• Lead security incident response, root-cause analysis and post‑incident reviews.
• Deliver security awareness and engage with auditors, MSSPs and SOC partners.

Skills

Information security

ISMS management

Security governance

Stakeholder engagement

Security reporting

Incident response

Threat awareness

Education

Degree in computer science or related discipline

Tools

Microsoft Defender

SIEM (Sentinel)

EDR/XDR

Vulnerability management

Job description

Bachy Soletanche/GSA, supporting Sizewell C, is seeking an Information Security & Assurance Officer to ensure delivery of client ISMP controls and governance across projects.

You will own the ISMS, coordinate security assessments, manage supplier security, and align with UK GDPR and NIS2 where applicable, while driving continuous improvement and security culture across the organisation.

This role is based at Sizewell C with access to modern security tooling and cross‑site collaboration.