Information Security GRC Lead – ISO27001

Barclay Simpson; Greater London; Hybrid; GBP 70,000 - 110,000; Full time

Job summary

Barclay Simpson is seeking an experienced ISO 27001 Lead to drive end-to-end implementation and certification across a global organisation. You will design, build and operationalise the ISMS in line with ISO/IEC 27001:2022.

Responsibilities include conducting enterprise-wide gap assessments, defining scope and governance, developing risk registers and SoA, and delivering a budgeted implementation roadmap with cross-functional collaboration across Technology, Security, Legal, HR and Procurement.

Qualifications

• Proven track record leading ISO 27001 certification end-to-end in complex environments.
• Strong knowledge of ISO/IEC 27001:2022 and ISO 27002:2022.
• Experience implementing risk management frameworks and ISMS governance.
• Cloud security familiarity (Azure/M365, AWS, GCP) and core disciplines (IAM, monitoring, incident & vulnerability management).
• Strong stakeholder engagement and programme delivery capability.

Responsibilities

• Conduct enterprise-wide ISO 27001:2022 gap assessment.
• Define ISMS scope, context, governance and risk methodology.
• Develop the risk register, SoA and risk treatment plans.
• Deliver a prioritised implementation roadmap including budget, resourcing and timelines.
• Establish ISMS governance, metrics, management review and audit readiness.
• Coordinate cross-functionally with Technology, Security, Legal, HR, Procurement and Business Units.

Skills

ISO 27001 knowledge

Cloud security familiarity

Stakeholder engagement

Program delivery

Job description

We are seeking an experienced ISO 27001 Lead to drive end-to-end implementation and certification across a global organisation. This role will lead the design, build and operationalisation of the ISMS in line with ISO/IEC 27001:2022.

Key Responsibilities

• Conduct enterprise-wide ISO 27001:2022 gap assessment
• Define ISMS scope, context, governance and risk methodology.
• Develop the risk register, Statement of Applicability (SoA) and risk treatment plans.
• Deliver a prioritised implementation roadmap including budget, resourcing and timelines.
• Establish ISMS governance, metrics, management review and audit readiness.
• Coordinate cross-functionally with Technology, Security, Legal, HR, Procurement and Business Units.

Required Experience

• Proven track record leading ISO 27001 certification end-to-end in complex environments.
• Strong knowledge of ISO/IEC 27001:2022 and ISO 27002:2022.
• Experience implementing risk management frameworks, ISMS governance and controls.
• Cloud security familiarity (Azure/M365, AWS, GCP) and core disciplines (IAM, monitoring, incident & vulnerability management).
• Strong stakeholder engagement and programme delivery capability.

Deliverables

• Gap assessment report
• Defined ISMS scope and governance model
• Implementation roadmap with budget & resource plan
• Audit-ready documentation and KPI dashboard

Qualifications:

ISO 27001 Lead Implementer and/or Lead Auditor.