Information Security Governance Manager

S-RM; London; Hybrid; GBP 65,000; Full time

Job summary

A leading consultancy is seeking an Information Security Governance Manager to join their London team. This role involves managing the organization's security policies, incident response, and building strong stakeholder relationships. The successful candidate will have a pivotal role in shaping the security culture and ensuring compliance with key frameworks. This opportunity not only offers competitive compensation but also emphasizes work-life balance through hybrid working models and generous leave policies.

Benefits

25 days holiday per year

Hybrid working and flexible hours

Matching pension contribution up to 7%

Life Insurance 4X annual salary

Private dental and medical insurance

Virtual GP access

Gym discounts

EAP programme access

Mindfulness app access

Qualifications

• Experience in cybersecurity and incident response.
• Proficient in developing security policies aligned with ISO27001.
• Strong communication skills for stakeholder engagement.

Responsibilities

• Oversee security awareness training and phishing tests.
• Coordinate internal incident responses and develop security policies.
• Manage audit processes and remediate findings from audits.

Skills

KPI Development

Incident Response

Phishing Testing

Security Awareness Training

Audit Management

Stakeholder Engagement

Job description

Join to apply for the Information Security Governance Manager role at S-RM

Join to apply for the Information Security Governance Manager role at S-RM

Get AI-powered advice on this job and more exclusive features.

Global Recruiter at S-RM | Hiring for our cyber security teams across EMEA, AMER & APAC | Incident Response, Cyber Risk Advisory, Digital Forensics…

S-RM is a global intelligence and cyber security consultancy. Since 2005, we’ve helped some of the most sophisticated clients in the world solve some of their toughest challenges.

We’ve been able to do this because of our outstanding people. We’re committed to developing bright, curious, driven individuals who want to think critically, solve complex problems, and achieve success.

But we also know that work isn’t everything, It’s about the lives and careers it helps us build. We’re immensely proud of this culture and we invest in our people’s wellbeing, learning, and ideas every day.

WORKING IN INFOSEC AT S-RM

As Information Security Governance Manager you’ll be responsible for:

• Building and delivering KPIs presentations to senior leadership and heads of departments.
• Working with Technology Operations to deploy companywide phishing tests, track and report on the results.
• Deploy company-wide security awareness training using company approved training platform and contribute to the evaluation of effectiveness of the selected training platform.
• Coordinate team effort in the investigation and containment activities in the internal incident response team.
• Maintaining and monitoring SOPs.
• Manage exceptions to organisation-wide security policies.
• Lead and complete assurance on technical security controls and technical design on both new and existing solutions in the application portfolio. Subsequently work with the business to close out identified gaps identified as part of the assurance process.
• Consult the rest of the business and represent Information Security in key forums, e.g. Project teams, Executive Committee, DevOps, IT Operations, Risk and Compliance and Legal to ensure that security standards are met and adhered to.
• Manage the supplier evaluation process and action findings identified from the process for RFP/RFIs requested from the business and internal supplier evaluation requirements.
• Coordinate the delivery of companies Incident Response and Disaster Recovery tabletop exercises and planned failover tests.
• Provide input to organisational risk registers, based on knowledge of current and emerging information security risk and known vulnerabilities within existing controls.
• Build and maintain positive stakeholder relationships at all levels of the organisation as well as with key external stakeholders (including clients, certification bodies and external consultants).
• Develop the roadmap of InfoSec projects, drive the delivery of the roadmap and track completion progress.
• Provide input in InfoSec budget planning, covering investment in BAU as well as InfoSec project work.

Compliance

• Develop and implement and support in the maintenance of organisation-wide security policies and processes that are aligned with ISO27001:2022, CIS and NIST frameworks.
• Managing internal and external audit programmes and maintenance of established frameworks such as ISO27001 and Cyber Essentials and other frameworks where required.
• Manage remediation process following external audits and internal security assessments. Includes coordination of pentest findings, vuln scan findings and CIS benchmark reviews but does not involve implementation of the fixes.

The successful candidate must have permission to work in London by the start of their employment.

We offer thoughtful, balanced rewards and support to help our people do their best work and live their lives outside it, this includes but is not exhaustive of:

• 25 days holiday per year in addition to bank holidays (+1 day for every year of service up to a maximum of 30 days in total);
• Hybrid working and flexible working hours;
• Matching pension contribution up to 7% (up to a maximum of 14% combined), and financial education;
• Life Insurance 4X annual salary.

Parental Support:

• Fertility treatment leave – 5 days of leave per cycle of treatment per year;
• Maternity leave – 26 weeks of full pay followed by 13 weeks of half pay;
• Paternity leave – 6 weeks of full pay.

Various Health and Medical Benefits including:

• Private dental and medical insurance (taxable benefit) for you and your family;
• Virtual GP for you and your family members that live in the same household;
• Various gym discounts for you and your partner;
• EAP programme for you and your immediate family;
• Free access to the world-famous mindfulness app Headspace.

Seniority level

• Seniority level

  Not Applicable

Employment type

• Employment type

  Full-time

Job function

• Job function

  Consulting

• Industries

  Security and Investigations and IT Services and IT Consulting

Referrals increase your chances of interviewing at S-RM by 2x

Get notified about new Information Manager jobs in London Area, United Kingdom.

Information Technology Service Desk Manager

London, England, United Kingdom 2 weeks ago

London, England, United Kingdom 6 days ago

City Of London, England, United Kingdom £57,240.00-£64,610.00 1 day ago

London, England, United Kingdom 3 weeks ago

London, England, United Kingdom 2 weeks ago

London, England, United Kingdom 2 weeks ago

London, England, United Kingdom 10 hours ago

London, England, United Kingdom 1 week ago

London, England, United Kingdom 2 weeks ago

London, England, United Kingdom 1 month ago

Records and Information Governance Officer

London, England, United Kingdom 1 day ago

London, England, United Kingdom 1 month ago

London, England, United Kingdom 1 week ago

London, England, United Kingdom 4 days ago

London, England, United Kingdom 1 week ago

London Area, United Kingdom £50,000.00-£60,000.00 4 hours ago

Woking, England, United Kingdom 3 weeks ago

London, England, United Kingdom 1 month ago

Senior Information Technology Audit Manager

London, England, United Kingdom 2 weeks ago

Manufacturing knowledge Management Specialist - Relocate to Saudi Arabia, Permanent Expat Family Relocation Package

Greater London, England, United Kingdom 3 weeks ago

Senior Information Technology Audit Manager

Senior Information Technology Audit Manager

We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.