Information Security Manager - HYBRID

Proactive Appointments; Cambridgeshire and Peterborough; On-site; GBP 60,000 - 90,000; Full time

Job summary

Proactive Appointments is seeking an Information Security Manager to strengthen and continually improve our information security, governance and compliance environment. The role focuses on maintaining an ISO 27001-certified ISMS and supporting broader compliance activities.

You will align security requirements with business goals, manage risks and collaborate with stakeholders to implement practical controls and assurance activities.

Qualifications

• 5-8 years' experience in information security, cyber security, governance, risk or compliance, with strong practical experience of ISO 27001 and ISMS requirements.

Responsibilities

• Maintain and continually improve the ISO 27001 ISMS, policies, controls and supporting processes.
• Support ISO 27001 audits, certification activities and customer assurance requests.
• Manage information security risks, DPIAs, supplier assessments and corrective actions.
• Coordinate security incidents, business continuity and disaster recovery activities.
• Support vulnerability management, penetration testing and remediation.
• Maintain compliance with ISO 9001, Cyber Essentials/Cyber Essentials Plus and relevant regulatory requirements.
• Provide practical security guidance to technical and business teams.
• Drive security awareness, continual improvement and a strong culture of compliance.

Skills

ISO 27001

ISMS

Information Security

Risk Management

Audit & Assurance

Supplier Security

Incident Management

Business Continuity

Vulnerability Management

Compliance

Job description

Information Security Manager

We are seeking an experienced Information Security Manager to strengthen and continually improve our information security, governance and compliance environment.

A key focus of the role will be supporting and maintaining an ISO 27001-certified Information Security Management System (ISMS), alongside broader compliance, risk and assurance activities.

Key Responsibilities

• Maintain and continually improve the ISO 27001 ISMS, policies, controls and supporting processes.
• Support ISO 27001 audits, certification activities and customer assurance requests.
• Manage information security risks, DPIAs, supplier assessments and corrective actions.
• Coordinate security incidents, business continuity and disaster recovery activities.
• Support vulnerability management, penetration testing and remediation.
• Maintain compliance with ISO 9001, Cyber Essentials/Cyber Essentials Plus and relevant regulatory requirements.
• Provide practical security guidance to technical and business teams.
• Drive security awareness, continual improvement and a strong culture of compliance.

About You

You will have 5-8 years' experience in information security, cyber security, governance, risk or compliance, with strong practical experience of ISO 27001 and ISMS requirements.

You will be confident working with technical and non-technical stakeholders, managing risk and audit activities, and translating security requirements into practical, effective controls.

Key skills: ISO 27001 | ISMS | Information Security | Risk Management | Audit & Assurance | Supplier Security | Incident Management | Business Continuity | Vulnerability Management | Compliance