Information Security Manager (GRC focus)

Michael Page (UK); City Of London; Hybrid; GBP 50,000 - 80,000; Full time

Job summary

A leading housing group is looking for a GRC expert to enhance their information security framework and ensure compliance with industry standards. This role involves developing security policies, performing risk assessments, and providing employee training while supporting professional development. The position is primarily remote with a requirement for occasional office presence in London.

Benefits

Yearly bonus

Generous pension scheme

Life assurance coverage

Support for professional development

Qualifications

• Strong understanding of ISO 27001, NIST, PCI-DSS frameworks.
• Demonstrated experience in developing security strategies and action plans.
• Proven ability to work collaboratively across departments.

Responsibilities

• Develop and maintain information security policies and procedures.
• Conduct risk assessments and monitor security measures.
• Provide training on security best practices.

Skills

Information security frameworks

Risk management

Collaborative work

Education

Relevant certifications in information security

Job description

• An impactful new GRC role
• Hybrid role ( once a week in office )

About Our Client

My client is a housing group, it is committed to leveraging technology to support its mission while maintaining a secure and reliable digital environment.

Job Description

• Develop and maintain the organisation's information security policies and procedures.
• Ensure compliance with relevant regulatory and industry standards.
• Conduct risk assessments to identify and address potential security threats.
• Collaborate with the Technology team to implement security controls and solutions.
• Provide training and guidance on security best practices to employees.
• Monitor and report on the effectiveness of security measures and systems.
• Work with external partners to carry out audits and maintain certifications.

The Successful Applicant

• A strong understanding of information security frameworks and standards such as ISO 27001, NIST, PCI-DSS
• Demonstrated experience in risk management includes developing related strategies, action plans
• Proven ability to work collaboratively across departments.
• Relevant certifications in information security or equivalent professional qualifications

What's on Offer

• Yearly bonus
• Generous pension scheme.
• Life assurance coverage
• Support for professional development.
• Primarily remote working with occasional commuting to London