Information Security Manager

ZipRecruiter; London; On-site; GBP 60,000 - 80,000; Full time

Job summary

An established industry player is seeking an experienced Information Security Manager to enhance their security governance and risk management practices. This pivotal role involves managing ISO 27001-compliant systems and leading the security strategy in a dynamic, global environment. The position is based in London, requiring onsite presence five days a week. Join a forward-thinking company that supports NGOs and government organizations in hostile environments, and make a significant impact by ensuring robust security measures are in place. If you thrive in a challenging environment and are passionate about information security, this opportunity is perfect for you.

Qualifications

• Proven experience managing ISO 27001-compliant systems.
• Strong background in information security governance and risk management.

Responsibilities

• Take ownership of ISO 27001-aligned ISMS and build governance frameworks.
• Lead security strategy across a global footprint.

Skills

ISO 27001 Management

Information Security Governance

Risk Management

Cyber Essentials Accreditation

UK GDPR Knowledge

Stakeholder Engagement

Commercial Mindset

Job description

Job Description

Information Security Manager | Full-time Onsite | Victoria, London | 3 Stage Process | £60,000 - £80,000 bonus

We are working with a growing security intelligence business with operations in the UK, Ukraine and UAE. They work across security, NGOs, government and charity organisations offering intelligence and security risk support in hostile environments.

Due to expansion and increased strategic focus, they are looking for an experienced Information Security Manager to take ownership of their ISO 27001-aligned ISMS, build out governance frameworks and lead security strategy across a global footprint.

The role is based out of their Victoria office in London, with an expectation of being onsite 5 days per week initially. The interview process consists of 3 stages, including technical and stakeholder engagement rounds.

Skills & Experience:

1. Proven experience managing and implementing ISO 27001-compliant systems
2. Strong background in information security governance and risk management
3. Experience with Cyber Essentials/Cyber Essentials Plus accreditation processes
4. Knowledge of UK GDPR (though this will be managed by somebody else) and broader frameworks like NIST, ISO 31000 or CIS Controls
5. Excellent communicator, able to engage stakeholders across technical and non-technical teams
6. Commercial mindset and background

If you’d like to find out more, apply directly or message me on LinkedIn and we can go through the role in more detail!