Information Security Manager

Inara; Greater London; Hybride; GBP 90 000 - 110 000; Plein temps

Résumé du poste

Inara in London is hiring an IT Security & Compliance Manager for a hybrid role requiring 2 days in the office. You will own the security and compliance agenda as the company scales globally, with responsibility for audits, controls, and customer assurance, contributing directly to revenue protection and market expansion.

You will lead audits (ISO 27001, SOC 2 Type 2, Cyber Essentials Plus), manage an outsourced SOC, drive the security roadmap, and oversee Azure/M365 security across a

Qualifications

• Information security management experience in SaaS or cloud environments.
• Experience managing an outsourced SOC/SOC team across time zones.
• Strong Azure and Microsoft 365 security knowledge.

Responsabilités

• Lead audit delivery end to end across Cyber Essentials Plus, ISO 27001, SOC 2 Type 2, SOC 3 and IRAP.
• Support partner-led programmes with controls, evidence and continuous monitoring inputs.
• Own the security roadmap and risk register, plus vulnerability scanning, pen test scoping and patching SLAs.
• Manage an outsourced SOC and lead incident response across time zones.
• Evaluate and manage security tooling across an Azure and Microsoft 365 estate.
• Run security awareness, supplier security reviews and customer assurance (RFPs, questionnaires, customer audits).
• Report monthly security and compliance KPIs to the exec team.

Connaissances

Information security management

SOC team management

Azure security

Microsoft 365 security

Outils

Azure

Microsoft 365

Description du poste

IT Security & Compliance Manager | London (Hybrid, 2 days in office)

Salary - Around £100k

We’re partnering with a fast-growing global SaaS business that’s expanding across the UK, US, Australia and Europe, and they need someone to own their security and compliance agenda as they scale.

This isn’t a “keep the lights on” security role. Their government and regulated customers need proof of security before they buy, so every audit you deliver directly protects revenue and opens up new markets. You’ll be the person making that happen.

What you’ll be doing:

• Leading audit delivery end to end across Cyber Essentials Plus, ISO 27001, SOC 2 Type 2, SOC 3 and IRAP, from scoping and evidence through to certification
• Supporting a partner-led programmes with controls, evidence and continuous monitoring inputs
• Owning the security roadmap and risk register, plus vulnerability scanning, pen test scoping and patching SLAs
• Managing an outsourced SOC and leading incident response across time zones
• Evaluating and managing security tooling across an Azure and Microsoft 365 estate
• Running security awareness, supplier security reviews and customer assurance (RFPs, questionnaires, customer audits)
• Reporting monthly security and compliance KPIs to the exec team

What they’re looking for:

• Information security management, ideally in SaaS or cloud
• Experience managing an outsourced SOC/ SOC team
• Strong Azure and M365 security knowledge

Nice to have:

CISSP, CISM, CISA or ISO 27001 Lead Auditor; SOC 2 Type 2 delivery; IRAP or FedRAMP exposure; experience working across multiple countries.

You’ll report into the VP of IT & Information Security.

#InformationSecurity #ISO27001 #SOC2 #CyberSecurity #Compliance #Hiring