Information Security Lead

GCS; Birmingham; On-site; GBP 70,000 - 90,000; Full time

Job summary

A leading technology firm is seeking an experienced Information Security Lead in Birmingham, UK. This role involves owning information security governance and ISO 27001 compliance, ensuring audit readiness while enabling teams to operate securely. The ideal candidate will have over 7 years of experience in information security roles, strong collaboration skills, and a track record of managing documentation and compliance artefacts. Additional experience with frameworks like SOC 2 is preferred.

Qualifications

• 7+ years’ experience in information security or ISMS leadership roles.
• Hands-on experience owning ISO 27001 end-to-end, including audits and management reviews.
• Strong experience managing evidence, documentation, and compliance artefacts.

Responsibilities

• Own information security governance and the ISMS end-to-end.
• Lead compliance against recognised security standards like ISO 27001.
• Establish and maintain a robust, audit-ready evidence pipeline.

Skills

Information security governance

Risk management

Audit readiness

ISO 27001 compliance

Stakeholder collaboration

Job description

My client is recruiting an Information Security Lead to take full ownership of information security governance, risk management, and audit readiness across the organisation. This role is responsible for ensuring the business remains continuously compliant while enabling teams to operate quickly and securely in a regulated environment.

The successful candidate will lead the information security function, working closely with technical and operational teams to embed pragmatic, delivery‑focused security practices that support business outcomes.

Key Responsibilities

• Own information security governance and the ISMS end‑to‑end, including risk registers, policies, internal audits, management reviews, and external audits.
• Lead compliance against recognised security standards (including ISO 27001) and extend governance into additional frameworks where required.
• Establish and maintain a robust, audit‑ready evidence pipeline with clearly defined ownership.
• Maintain a live, decision‑focused risk register with mitigation plans and accountable owners.
• Operate pragmatic policy lifecycle and exception management processes.
• Define evidence and assurance expectations for technical security controls.
• Validate control effectiveness and ensure ongoing audit readiness.
• Support vendor and customer security due diligence activities.
• Observe incident response exercises and ensure corrective actions are tracked and closed.
• Design and deliver organisation‑wide security awareness and training programmes.
• Maintain clear, accessible security guidance and best practices for all teams.
• Lead and develop the information security function, partnering across engineering, IT, operations, and governance teams.
• Contribute to resilience, reliability, and continuous improvement initiatives from a risk and governance perspective.

Qualifications and Experience

• 7+ years’ experience in information security or ISMS leadership roles.
• Hands‑on experience owning ISO 27001 end‑to‑end, including audits and management reviews.
• Strong experience managing evidence, documentation, and compliance artefacts.
• Proven ability to translate technical security controls into compliance‑ready evidence.
• Track record of influencing stakeholders through collaboration rather than enforcement.

Preferred

• Experience with additional frameworks such as SOC 2, ISO 27701, or CIS.
• Professional security certifications (e.g. CISSP, CISM, ISO Lead Auditor/Implementer).
• Experience working closely with security engineering or platform teams.
• Background in fast‑moving or growth‑oriented environments.

Create a job alert for this search

Information Security Lead • Birmingham, UK