Information Security Manager (GRC focus)

Michael Page; London; Remote; GBP 60,000 - 80,000; Full time

Job summary

A leading company in the not-for-profit sector seeks an Information Security Manager. This role is critical in developing security policies, ensuring compliance with standards, and addressing potential threats. Join a dedicated team in enhancing security practices in a primarily remote work environment.

Benefits

Yearly bonus

Generous pension scheme

Life assurance coverage

Support for professional development

Qualifications

• Strong understanding of ISO 27001, NIST, PCI-DSS.
• Experience in risk management with strategic development.
• Proven collaborative skills with various departments.

Responsibilities

• Develop and maintain information security policies.
• Conduct risk assessments to address security threats.
• Monitor effectiveness of security measures.

Skills

Understanding of information security frameworks

Risk management

Collaboration

Education

Relevant certifications in information security

Job description

The Information Security Manager will oversee and enhance the organisation's information security framework, ensuring compliance with industry standards and safeguarding sensitive data. This role offers an exciting opportunity to make a meaningful contribution within the not–for–profit sector.

Client Details

My client is a housing group, it is committed to leveraging technology to support its mission while maintaining a secure and reliable digital environment.

Description

• Develop and maintain the organisation's information security policies and procedures.
• Ensure compliance with relevant regulatory and industry standards.
• Conduct risk assessments to identify and address potential security threats.
• Collaborate with the Technology team to implement security controls and solutions.
• Provide training and guidance on security best practices to employees.
• Monitor and report on the effectiveness of security measures and systems.
• Work with external partners to carry out audits and maintain certifications.

Profile

• A strong understanding of information security frameworks and standards such as ISO 27001, NIST, PCI–DSS
• Demonstrated experience in risk management includes developing related strategies, action plans
• Proven ability to work collaboratively across departments.
• Relevant certifications in information security or equivalent professional qualifications

Job Offer

• Yearly bonus
• Generous pension scheme.
• Life assurance coverage
• Support for professional development.
• Primarily remote working with occasional commuting to London