Information Security & Compliance Lead

Fawkes & Reece London; City Of London; On-site; GBP 85,000 - 120,000; Full time

Job summary

Fawkes & Reece London is seeking an experienced Information Security Manager to join its Group IT function in London. You will own information security governance, risk management, data protection and business continuity across a global business.

Working with senior security leaders, you will embed security into everyday processes, improve regulatory compliance and promote a security-aware culture through training, reporting and ongoing risk remediation.

Qualifications

• At least 3 years' experience in IT operations and 3 years' experience within an enterprise information security environment.
• At least 5 years' experience working with Microsoft information security tools, with evidence of improving compliance.
• At least 3 years' experience maintaining an information security-accredited environment, including ISO 27001 and Cyber Essentials Plus.
• Strong knowledge of information security governance, risk management, data protection and compliance.

Responsibilities

• Develop, implement and maintain information security policies, procedures and governance frameworks.
• Manage information security risks, maintain the risk register and oversee remediation activities.
• Ensure compliance with ISO 27001, GDPR and Cyber Essentials Plus, alongside relevant contractual and regulatory requirements.
• Conduct risk assessments, internal audits, compliance reviews and DPIAs.
• Support the management of security incidents, business continuity planning and incident response exercises.
• Maintain ISO 27001 documentation, including the Statement of Applicability, and coordinate internal and external audits.
• Work closely with Cyber Security, Group IT, HR and external service providers to assess risks and implement effective security controls.
• Provide security guidance to stakeholders, customers and project teams, ensuring security requirements are embedded into new and existing services.
• Promote security awareness through training, onboarding and ongoing knowledge sharing.
• Produce regular management reports and executive updates on security performance, risks and compliance.
• Manage security-related projects and continuous improvement initiatives, ensuring timely delivery and successful adoption.
• Support the Data Protection Officer with data protection matters, including Data Subject Access Requests where required.

Skills

IT operations

Enterprise security

Governance & compliance

Data protection

Stakeholder management

Security awareness

Risk management

Security leadership

Tools

Microsoft Purview

Entra ID

Microsoft Defender

Cyera

Microsoft Copilot

Job description

Fawkes & Reece London is seeking an experienced Information Security Manager to join its Group IT function in London. You will own information security governance, risk management, data protection and business continuity across a global business.

Working with senior security leaders, you will embed security into everyday processes, improve regulatory compliance and promote a security-aware culture through training, reporting and ongoing risk remediation.