Information Security Manager

Project People; Reading; Hybrid; GBP 70,000 - 90,000; Full time

Job summary

A digital infrastructure organization is seeking an experienced Information Security Manager to lead the development of their Information Security Management System. This role requires managing compliance with ISO 27001 and promoting a security-first culture. Ideal candidates will have a strong background in cyber threats and regulatory frameworks, with excellent communication skills and experience in risk management.

Qualifications

• Proven experience managing an enterprise ISMS and leading ISO 27001 audits.
• Strong understanding of cyber threats and cloud security (Azure / M365).
• Sound knowledge of GDPR and relevant regulatory frameworks.

Responsibilities

• Lead and continuously improve our ISMS.
• Manage ISO 27001 certification, surveillance audits, and compliance activities.
• Oversee cyber risk management and report key metrics to senior leadership.

Skills

Managing enterprise ISMS

Understanding cyber threats and cloud security

Communication skills

Leading governance forums

Tools

ISMS Online

Qualys VMDR

Cofense

Job description

🚀 New Opportunity: Information Security Manager (Permanent)

Sector: Telecoms Infrastructure
Location: Reading area - 3 days per week in office

Are you ready to take the lead in shaping the future of cyber security within one of the UK's most dynamic digital infrastructure organisations?

We're looking for an Information Security Manager to own and evolve our Information Security Management System (ISMS) and drive alignment with ISO 27001:2022. This is your chance to combine strategic influence with hands‑on impact - protecting critical assets, leading transformation, and championing a security‑first culture across the business.

You’ll collaborate closely with teams across IT, Legal, Procurement, and Operations, acting as the go‑to expert for information assurance, incident management, and regulatory compliance.

💼 What You’ll Be Doing

• Lead and continuously improve our ISMS
• Manage ISO 27001 certification, surveillance audits, and compliance activities
• Oversee cyber risk management and report key metrics to senior leadership
• Coordinate incident response, forensic investigations, and remediation efforts
• Drive supplier assurance and manage third‑party risk
• Maintain security governance frameworks, policies, and standards
• Deliver engaging cyber awareness programmes across the organisation
• Provide expert security guidance throughout technology and project lifecycles

🌟 What We’re Looking For

• Proven experience managing an enterprise ISMS and leading ISO 27001 audits
• Strong understanding of cyber threats and cloud security (Azure / M365)
• Sound knowledge of GDPR and relevant regulatory frameworks
• Experience in vulnerability management, penetration testing, and supplier assurance
• Excellent communication skills with the ability to influence and engage stakeholders
• Confident leading governance forums and promoting a security‑first mindset
• Familiarity with tools such as ISMS Online, Qualys VMDR, and Cofense (a plus!)

To apply for the Information Security Manager, please send your CV to [e-mail]

Project People is acting as an Employment Agency in relation to this vacancy.