Information Security Lead - ISO 27001, GDPR & Risk (Hybrid)

Harvey Nash; Birmingham; Hybrid; GBP 72,000 - 88,000; Full time

Job summary

A leading recruitment firm in Birmingham is seeking an Information Security Lead to mature the security posture of a B2B SaaS scaleup. This hybrid role involves owning the security strategy, conducting risk assessments, and driving compliance initiatives like ISO 27001 and GDPR. The ideal candidate will have strong knowledge of security frameworks, excellent interpersonal skills, and security certifications such as CISSP or CISM. Competitive salary of up to £80,000 plus a 10% bonus.

Qualifications

• Strong knowledge of security frameworks such as ISO 27001 and NIST.
• Technical understanding of web app vulnerabilities and testing methodologies.
• Proven ability to develop and implement security policies.

Responsibilities

• Own and evolve the information security strategy, policies, and procedures.
• Lead risk assessments and manage the security risk register.
• Drive compliance initiatives including ISO 27001 and GDPR.
• Oversee vulnerability management and coordinate penetration testing.

Skills

Security frameworks knowledge (ISO 27001, NIST)

Experience with GDPR and client compliance

Technical web app vulnerability understanding

Policy development and implementation

Risk assessment skills

Interpersonal and influencing skills

Collaborative mindset

Security certifications (CISSP, CISM, CompTIA Security+)

SaaS experience

Job description

A leading recruitment firm in Birmingham is seeking an Information Security Lead to mature the security posture of a B2B SaaS scaleup. This hybrid role involves owning the security strategy, conducting risk assessments, and driving compliance initiatives like ISO 27001 and GDPR. The ideal candidate will have strong knowledge of security frameworks, excellent interpersonal skills, and security certifications such as CISSP or CISM. Competitive salary of up to £80,000 plus a 10% bonus.