Information Security Manager

Frontpoint Partners Ltd; Greater London; On-site; GBP 85,000 - 110,000; Full time

Job summary

Frontpoint Partners Ltd seeks an experienced Information Security Manager to strengthen information security, governance, risk and compliance across the business. This office-based role in Central London reports to the Group IT team and collaborates with Senior Information Security Manager and Cyber Security Manager.

You will lead policies, risk management, and compliance efforts, coordinate DPIAs and security assessments, and drive BC/IR policy development while educating stakeholders to foster

Qualifications

• 3+ years’ experience in an IT operational role.
• 3+ years’ experience within an Enterprise Information Security environment.
• 5+ years’ experience with Microsoft Information Security tools, with demonstrable improvements to compliance posture.
• 3+ years’ experience in an ISO27001 and Cyber Essentials Plus accredited environment.
• Strong Governance, Risk & Compliance (GRC) experience.
• Excellent analytical, troubleshooting and problem-solving skills.
• Strong leadership, communication and stakeholder-management abilities.
• Experience managing multiple projects and change initiatives concurrently.
• A strong understanding of IT service management, ideally including ITIL.
• Experience working with multiple security and technology toolsets.

Responsibilities

• Developing, implementing and maintaining information security policies, procedures and governance frameworks.
• Managing the security risk register, conducting risk assessments, audits and compliance testing.
• Maintaining and supporting ISO27001, GDPR and Cyber Essentials Plus compliance.
• Leading Information Security input into projects, new services and business processes, including DPIAs and security assessments.
• Managing Business Continuity and Incident Response policies, exercises and improvements.
• Delivering security projects, governance controls and ongoing improvements through to full adoption.
• Advising and educating stakeholders across the business to build a strong security-aware culture.
• Producing management information, executive reports and regular updates for senior stakeholders.

Skills

GRC experience

Leadership

Stakeholder management

ITIL

Analytical skills

Problem solving

Project management

Education

ITIL Foundation

ISO27001 Foundation

ISO27001 Auditor/Implementer

CISSP or CISM

Microsoft Information / Compliance product administration

Tools

Microsoft Purview

Cyera

Entra

Defender Security

Copilot

Job description

Information Security Manager – Central London

We are looking for an experienced Information Security Manager to join our Group IT team in a hands‑on role focused on strengthening information security, governance, risk and compliance across the business. This is a 5-day per week office-based position in Central London, with occasional travel to other company locations as required.

The Role

You will work closely with the Senior Information Security Manager and Cyber Security Manager, taking responsibility for:

• Developing, implementing and maintaining information security policies, procedures and governance frameworks.
• Managing the security risk register, conducting risk assessments, audits and compliance testing.
• Maintaining and supporting ISO27001, GDPR and Cyber Essentials Plus compliance.
• Leading Information Security input into projects, new services and business processes, including DPIAs and security assessments.
• Managing Business Continuity and Incident Response policies, exercises and improvements.
• Delivering security projects, governance controls and ongoing improvements through to full adoption.
• Advising and educating stakeholders across the business to build a strong security-aware culture.
• Producing management information, executive reports and regular updates for senior stakeholders.

What We're Looking For

Essential experience and skills:

• 3+ years’ experience in an IT operational role.
• 3+ years’ experience within an Enterprise Information Security environment.
• 5+ years’ experience working with Microsoft Information Security tools, with demonstrable improvements to compliance posture.
• 3+ years’ experience working within an ISO27001 and Cyber Essentials Plus accredited environment.
• Strong Governance, Risk & Compliance (GRC) experience.
• Excellent analytical, troubleshooting and problem-solving skills.
• Strong leadership, communication and stakeholder-management abilities.
• Experience managing multiple projects and change initiatives concurrently.
• A strong understanding of IT service management, ideally including ITIL.
• Experience working with multiple security and technology toolsets.

Qualifications

• Microsoft Information / Compliance product administration
• ITIL Foundation
• Information Security certifications or training
• ISO27001 Foundation, Auditor or Implementer
• CISSP or CISM

Experience with Microsoft Purview, Cyera, Entra, Defender Security and Copilot would also be highly valuable.

If you are a proactive, pragmatic Information Security professional who can combine technical understanding with strong business and stakeholder skills, we would love to hear from you