Information Security Manager

Ashdown Group; Crawley; Hybrid; GBP 60,000 - 80,000; Full time

Job summary

A multinational Software and Services firm is seeking an accomplished Information Security Manager to oversee its Governance, Risk, and Compliance (GRC) efforts. The role involves managing the implementation of the ISO 27001 Information Security Management System and ensuring compliance with the Digital Operational Resilience Act. The ideal candidate will be a certified security professional with a strong background in ISO 27001 and DORA compliance. This position offers flexibility with the option to work from home 2-3 days per week.

Benefits

Excellent range of benefits offered

Qualifications

• Certified security professional (CISSP, CISM, CISA).
• Previous experience working to ISO 27001 standards is essential.
• Commercial experience delivering DORA compliance is preferred.

Responsibilities

• Oversee the Governance, Risk, and Compliance (GRC) framework.
• Lead the implementation of the ISO 27001 Information Security Management System (ISMS).
• Ensure adherence to data governance and InfoSec laws and regulations.

Skills

CISSP

CISM

CISA

ISO 27001 standards

DORA compliance

Job description

Overview

A multinational Software and Services firm is looking for an accomplished Information Security Manager to join its team. The firm embraces flexibility, allowing you to work from home 2-3 days per week.

Responsibilities

Oversee the Governance, Risk, and Compliance (GRC) framework, ensuring robust standards are met across information security, physical security, crisis management, privacy, and regulatory compliance. Enhance business resilience and reduce risk exposure by ensuring robust policies, procedures, and controls are in place. Act as the guardian of the firm's regulatory and ethical obligations, ensuring adherence to all data governance and InfoSec laws and regulations.

Lead the implementation of the ISO 27001 Information Security Management System (ISMS), driving the process toward successful accreditation and maintaining the standard post-certification. Lead the implementation and maintenance of the Digital Operational Resilience Act (DORA) compliance framework, ensuring the organization meets requirements for risk management, incident reporting, and operational resilience.

Qualifications

Certified security professional (CISSP, CISM, CISA). Previous experience working to ISO 27001 standards is essential. Commercial experience delivering DORA compliance is preferred.

Benefits

Excellent range of benefits offered by a highly successful company.