Information Security Manager

Ashdown Group; Birmingham; Hybrid; GBP 60,000 - 80,000; Full time

Job summary

A multinational company is seeking an accomplished Information Security Manager to join its Birmingham team. The role requires proven experience in ISO 27001 standards and DORA compliance. You will oversee the Governance, Risk and Compliance framework, ensure robust security measures, and lead the implementation of compliance frameworks. Strong leadership and project management skills are essential. This position offers the flexibility to work from home up to three days per week, enhancing work-life balance.

Benefits

Work from home flexibility

Qualifications

• Proven experience as an accomplished Information Security Manager.
• Expert understanding of ISO 27001 standards and DORA compliance.
• Strong leadership and project management capabilities.

Responsibilities

• Oversee the Governance, Risk and Compliance framework for robust information security.
• Lead the implementation of the ISO 27001 Information Security Management System.
• Ensure compliance with the Digital Operational Resilience Act.

Skills

ISO 27001 standards

Digital Operational Resilience Act (DORA) compliance

Leadership

Project management

Communication skills

Job description

Overview

An impressive multinational business is looking for an accomplished Information Security Manager to join its team. The firm embraces flexibility, allowing you to work from home up to three days per week.

Key Responsibilities

• Oversee the Governance, Risk and Compliance (GRC) framework to ensure robust information security, physical security, crisis management, privacy and regulatory compliance standards are met.
• Act as the Lead Implementer for the ISO 27001 Information Security Management System (ISMS), driving the process toward successful accreditation and maintaining the standard post‑certification.
• Lead the implementation and maintenance of the Digital Operational Resilience Act (DORA) compliance framework, ensuring the organisation meets risk, recovery and reporting requirements.
• Enhance business resilience and reduce risk exposure by developing and enforcing policies, procedures, and controls.
• Serve as the guardian of the firm’s regulatory and ethical obligations, ensuring adherence to all data governance and InfoSec laws and regulations.

Qualifications

• Accomplished Information Security Manager with proven experience working to ISO 27001 standards.
• Expert understanding of ISO 27001 and Digital Operational Resilience Act (DORA) compliance.
• Strong leadership and project management skills, able to drive complex initiatives to completion.
• Excellent communication skills, with the ability to influence and align cross‑functional stakeholders.