Information Security Governance Manager

Barclay Simpson; London; Hybrid; GBP 75,000 - 85,000; Full time

Job summary

A leading company in the travel and tourism sector seeks an Information Security Governance Manager to ensure compliance with regulatory standards and lead a dedicated security team. This pivotal role involves managing risk, compliance, and governance, ensuring that security practices align with industry best practices and contribute to the organization's strategic growth.

Qualifications

• Strong understanding of information security best practices.
• Experience managing globally distributed cross-functional teams.
• Professional certifications in information security are highly desirable.

Responsibilities

• Manage the Security Governance Team to meet business requirements.
• Define and maintain information security policies and standards.
• Oversee incident response processes and promote a security culture.

Skills

Risk Management

Incident Response

Compliance Frameworks

Education

CISSP

CISM

CISA

Job description

Information Security Governance Manager, London

Client: Barclay Simpson

Location: London, United Kingdom

Job Category: Other

EU work permit required: Yes

Job Reference: b6d1adf8f630

Job Views: 4

Posted: 02.06.2025

Expiry Date: 17.07.2025

Job Description:

Information Security Governance Manager

Specialisms: GRC Jobs

• London, Hybrid
• £75,000 - £85,000
• Job type: Permanent
• Sector: Travel & Tourism, Commerce and Industry
• Job reference: JOL / 41824

We are partnering with an award-winning UK-based business seeking to hire an Information Security Governance Manager. This role is pivotal in ensuring compliance with regulatory standards such as ISO 27001, PCI DSS, and others. The successful candidate will take ownership of all aspects of information security risk, compliance, and governance, implementing industry standards and best practices as part of an integrated approach to security across the organisation. This is an outstanding opportunity to join a thriving and progressive company where Security & Trust are key to our strategic growth.

Responsibilities:

• Manage the Security Governance Team: Lead the team with a hands-on approach to meet business requirements and continual improvement goals.
• Policy and Compliance Management: Define, monitor, and maintain the organisation’s information security policies, procedures, and standards. Ensure compliance with regulatory, industry best practices, and stakeholder requirements.
• Risk Management and Assessments: Identify, assess, and mitigate information security risks through regular security assessments on third parties, information assets, projects, and sites.
• Incident Response and Oversight: Oversee the incident response process, including identification, notification, investigation, and reporting. Contribute to the Information Security Awareness Programme to promote a security culture within the organisation.
• Performance Tracking and Vendor Security: Define and track key performance indicators (KPIs) and key risk indicators (KRIs) to measure the effectiveness of the information security programme. Develop and maintain vendor security assessments and due diligence processes.

Qualifications:

• Strong understanding of information security best practices, regulatory requirements, and industry standards (ISO 27001, PCI-DSS, SOX).
• Knowledge of risk management, incident response, and compliance frameworks.
• Experience working with globally distributed cross-functional teams and managing security initiatives.
• Professional certifications such as CISSP, CISM, or CISA are highly desirable.

If you would like any further details please contact James Lawrence – jol