Information Security Manager

Project People; England; Hybrid; GBP 60,000 - 80,000; Full time

Job summary

A leading telecom infrastructure organization in the UK is seeking an experienced Information Security Manager to lead and evolve their Information Security Management System. You will manage ISO 27001 compliance, oversee cyber risk management, and drive a security-first culture across the organization, collaborating closely with various teams. This permanent position is based in the Reading area with a hybrid work model (3 days in the office).

Qualifications

• Proven experience managing an enterprise ISMS and leading ISO 27001 audits.
• Strong understanding of cyber threats and cloud security.
• Sound knowledge of GDPR and relevant regulatory frameworks.
• Experience in vulnerability management and supplier assurance.

Responsibilities

• Lead and continuously improve our ISMS.
• Manage ISO 27001 certification and compliance activities.
• Oversee cyber risk management and report key metrics.
• Coordinate incident response and remediation efforts.
• Drive supplier assurance and manage third-party risk.

Skills

Enterprise ISMS management

ISO 27001 audits

Cyber threats knowledge

Cloud security (Azure/M365)

GDPR knowledge

Vulnerability management

Penetration testing

Excellent communication skills

Tools

ISMS Online

Qualys VMDR

Cofense

Job description

New Opportunity: Information Security Manager (Permanent)

Sector: Telecoms Infrastructure

Location : Reading area - 3 days per week in office

Are you ready to take the lead in shaping the future of cyber security within one of the UK's most dynamic digital infrastructure organisations?

We're looking for an Information Security Manager to own and evolve our Information Security Management System (ISMS) and drive alignment with ISO 27001 : 2022. This is your chance to combine strategic influence with hands‑on impact - protecting critical assets, leading transformation, and championing a security‑first culture across the business.

You'll collaborate closely with teams across IT, Legal, Procurement, and Operations, acting as the go‑to expert for information assurance, incident management, and regulatory compliance.

What You’ll Be Doing

• Lead and continuously improve our ISMS
• Manage ISO 27001 certification, surveillance audits, and compliance activities
• Oversee cyber risk management and report key metrics to senior leadership
• Coordinate incident response, forensic investigations, and remediation efforts
• Drive supplier assurance and manage third‑party risk
• Maintain security governance frameworks, policies, and standards
• Deliver engaging cyber awareness programmes across the organisation
• Provide expert security guidance throughout technology and project lifecycles

What We’re Looking For

• Proven experience managing an enterprise ISMS and leading ISO 27001 audits
• Strong understanding of cyber threats and cloud security (Azure / M365)
• Sound knowledge of GDPR and relevant regulatory frameworks
• Experience in vulnerability management, penetration testing, and supplier assurance
• Excellent communication skills with the ability to influence and engage stakeholders
• Confident leading governance forums and promoting a security‑first mindset
• Familiarity with tools such as ISMS Online, Qualys VMDR, and Cofense (a plus!)

To apply for the Information Security Manager, please send your CV to

Project People is acting as an Employment Agency in relation to this vacancy