Information Security Manager

Ashdown Group; Manchester; Hybrid; GBP 65,000 - 85,000; Full time

Job summary

A multinational business is seeking an accomplished Information Security Manager to oversee its Governance, Risk and Compliance framework and lead the ISO 27001 Information Security Management System. The role emphasizes strong leadership and project management capabilities, particularly in maintaining compliance with the Digital Operational Resilience Act. The company promotes flexibility, allowing for remote work up to three days per week.

Benefits

Flexible working arrangements

Work from home up to three days per week

Qualifications

• Proven experience as an Information Security Manager.
• Expert understanding of ISO 27001 and DORA compliance.
• Strong leadership skills with the ability to drive initiatives.

Responsibilities

• Oversee Governance, Risk and Compliance (GRC) framework.
• Lead implementation of ISO 27001 Information Security Management System.
• Ensure compliance with Digital Operational Resilience Act.

Skills

ISO 27001 standards

Digital Operational Resilience Act (DORA) compliance

Leadership

Project management

Communication skills

Job description

Overview

An impressive multinational business is looking for an accomplished Information Security Manager to join its team. The firm embraces flexibility, allowing you to work from home up to three days per week.

Key Responsibilities

• Oversee the Governance, Risk and Compliance (GRC) framework to ensure robust information security, physical security, crisis management, privacy and regulatory compliance standards are met.
• Act as the Lead Implementer for the ISO 27001 Information Security Management System (ISMS), driving the process toward successful accreditation and maintaining the standard post‑certification.
• Lead the implementation and maintenance of the Digital Operational Resilience Act (DORA) compliance framework, ensuring the organisation meets risk, recovery and reporting requirements.
• Enhance business resilience and reduce risk exposure by developing and enforcing policies, procedures, and controls.
• Serve as the guardian of the firm’s regulatory and ethical obligations, ensuring adherence to all data governance and InfoSec laws and regulations.

Qualifications

• Accomplished Information Security Manager with proven experience working to ISO 27001 standards.
• Expert understanding of ISO 27001 and Digital Operational Resilience Act (DORA) compliance.
• Strong leadership and project management skills, able to drive complex initiatives to completion.
• Excellent communication skills, with the ability to influence and align cross‑functional stakeholders.