Information Security Lead

JR United Kingdom; London; Hybrid; GBP 100,000 - 125,000; Full time

Job summary

An innovative and rapidly growing company in London is on the lookout for an experienced Information Security Lead. In this pivotal role, you'll be responsible for leading security initiatives, maintaining ISO 27001 certification, and implementing robust security policies. Your expertise in SaaS security and risk management will be crucial as you work closely with both technical and non-technical stakeholders. If you're passionate about information security and thrive in a dynamic environment, this is the perfect opportunity to make a significant impact.

Qualifications

• 3-5 years of hands-on experience in information security or IT risk/compliance.
• Good knowledge of ISO 27001 and cloud security risks.

Responsibilities

• Lead information security initiatives and align with business objectives.
• Maintain ISO 27001 certification and manage security policies.

Skills

Information Security

ISO 27001

SaaS Security

GDPR Compliance

Incident Response

Communication Skills

Tools

SIEM

DLP

IAM

SSO

Job description

Social network you want to login/join with:

A brilliant growing client of mine in London is currently looking for an experienced 'InfoSec Lead' to join their team.

The successful candidate must have excellent communication skills and the ability to work closely with key clients, explaining technical terms to non-technical stakeholders. They also must have experience working for a B2B SaaS Company. If you have worked a similar role in a startup environment this is a bonus.

Job Title: Information Security Lead

Salary: Up to £75,000

Location: London (Hybrid - 2 Days Onsite a Week)

Start: ASAP

Responsibilities:

• Security Leadership: Own and lead info security, align with business.
• ISO 27001 & ISMS: Maintain/evolve certification and ISMS.
• Policies & Training: Create/manage policies, deliver security training.
• Security Operations: Implement controls (access, encryption, logging), lead incident response, manage pen tests/vulnerabilities.

Requirements:

• 3-5 years hands-on info security or IT risk/compliance.
• SaaS or fast-paced startup/scale-up experience.
• Good ISO 27001 knowledge (certification maintenance/achievement).
• Understanding of cloud (AWS preferred) and SaaS security risks.
• Hands-on with endpoint protection, SIEM, DLP, IAM, SSO.
• Clear understanding of GDPR.
• Familiarity with security tooling (endpoint, SSO/IAM, monitoring, scanning).
• Experience with risk assessments, incident response, security policies.
• Strong communication skills (technical and non-technical).

If you feel this position is for you then please Apply!