Information Security Manager

Faculty; Greater London; On-site; GBP 90,000 - 120,000; Full time

Benefits offered by this job

Unlimited Annual Leave Policy

Private healthcare and dental

Enhanced parental leave

Family-Friendly Flexibility & Flexible

Hybrid Working

Sanctus Coaching

Job summary

Faculty is seeking an Information Security Manager to drive compliance and secure its scaling global operations. You will lead the ISO 27001:2022 management system, partner with senior stakeholders, and own the governance roadmap.

This is an ambitious, individual-contributor role with high impact on security posture across functions. You will work with engineering and IT teams to implement controls, respond to client inquiries, and report progress to leadership.

Qualifications

• Proven hands-on experience managing and auditing ISO 27001 frameworks.
• Strong ability to communicate complex security concepts to engineers and executives.
• Eligible for UK Security Check (SC) clearance to support public sector partnerships.

Responsibilities

• Own and evolve the ISO 27001:2022 ISMS to ensure robust compliance.
• Design and run internal audit schedules across central functions.
• Respond to client security questionnaires and due diligence requests as the security subject-matter expert.
• Collaborate with engineering and IT to implement security controls and enterprise architecture.
• Provide regular security governance updates to the Director of Security on metrics and risk landscapes.
• Assess policies and risk processes to prepare the organisation for global growth.

Skills

ISO 27001

Information security audits

Governance, risk & compliance

Cloud security (AWS/Azure/GCP)

Job description

Why Faculty?

We established Faculty in 2014 because we thought that AI would be the most important technology of our time. Since then, we’ve worked with over 350 global customers to transform their performance through human-centric AI. You can read about our real-world impact here.

We don’t chase hype cycles. We innovate, build and deploy responsible AI which moves the needle - and we know a thing or two about doing it well. We bring an unparalleled depth of technical, product and delivery expertise to our clients who span government, finance, retail, energy, life sciences and defence.

Our business, and reputation, is growing fast and we’re always on the lookout for individuals who share our intellectual curiosity and desire to build a positive legacy through technology.

AI is an epoch-defining technology, join a company where you’ll be empowered to envision its most powerful applications, and to make them happen.

About the team

The Security and BizTech team holds broad responsibility across Faculty. We manage all aspects of Information, Cyber, and Personnel risk, alongside overall ownership of IT and Systems Engineering. As a team of passionate specialists, we are dedicated to leveraging technology to help people. With Faculty expanding globally, our team plays a central role in ensuring a smooth and secure transition to a global operating model.

About the role:

As an Information Security Manager at Faculty, you will drive our compliance and secure our scaling global operations. Acting as the authoritative voice on internal information security, you will lead the evolution of our ISO 27001:2022 management system and serve as an essential partner to our business operations. This high-impact, individual contributor position is designed for an ambitious professional looking to own our governance roadmap and influence senior stakeholders.

What you'll be doing:

• Owning and continuously improving our ISO 27001:2022 Information Security Management System (ISMS) to ensure robust compliance.
• Designing and executing comprehensive internal audit schedules to verify adherence to security policies across central functions.
• Serving as the authoritative technical partner when responding to client security questionnaires and due diligence requests.
• Collaborating closely with engineering and IT teams to implement innovative security controls and enterprise architecture.
• Reporting regularly to the Director of Security on compliance metrics, GRC progress, and technical threat landscapes.
• Evaluating security policies and risk management processes to prepare the organisation for future global growth.

Who we're looking for:

• You possess proven hands-on expertise managing and auditing ISO 27001 frameworks within complex, fast-paced corporate environments.
• You communicate complex technical security concepts clearly and confidently to both engineering professionals and commercial executives.
• You thrive in collaborative spaces, displaying the resilience and diplomacy needed to constructively debate and align with senior stakeholders.
• You hold, or are fully eligible to obtain, UK Security Check (SC) clearance to support our critical public sector partnerships.
• You bring a strong working knowledge of cloud ecosystems (AWS, Azure, or GCP), with any exposure to securing generative AI seen as a valuable asset.

Our interview process:

• Talent Team Screen (30 minutes)
• Hiring Manager Interview (45 minutes)
• Technical Interview (90 minutes)

Our Recruitment Ethos

We aim to grow the best team - not the most similar one. We know that diversity of individuals fosters diversity of thought, and that strengthens our principle of seeking truth. And we know from experience that diverse teams deliver better work, relevant to the world in which we live. We’re united by a deep intellectual curiosity and desire to use our abilities for measurable positive impact. We strongly encourage applications from people of all backgrounds, ethnicities, genders, religions and sexual orientations.

Some of our standout benefits:

• Unlimited Annual Leave Policy
• Private healthcare and dental
• Enhanced parental leave
• Family-Friendly Flexibility & Flexible working
• Sanctus Coaching
• Hybrid Working