Information Security Manager — Policy & Risk Leader

Fawkes & Reece Group; City Of London; On-site; GBP 90,000 - 120,000; Full time

Job summary

Fawkes & Reece Group in London is seeking an experienced Information Security Manager to join Group IT and protect a global business. You will own security governance, risk management, and regulatory compliance, embedding security into daily processes and enhancing a security-aware culture.

Working with senior security leads, you will implement policies, manage risks, run DPIAs, coordinate audits, and deliver timely security improvements across the organisation.

Qualifications

• Minimum 3 years' experience in IT operations.
• Minimum 3 years' experience in an enterprise information security environment.
• 5 years' experience working with Microsoft information security tools, with evidence of improving compliance.
• At least 3 years' experience maintaining an information security-accredited environment (ISO 27001 and Cyber Essentials Plus).
• Strong knowledge of governance, risk, data protection and compliance.

Responsibilities

• Develop, implement and maintain information security policies and governance frameworks.
• Manage information security risks, maintain the risk register and oversee remediation.
• Ensure compliance with ISO 27001, GDPR and Cyber Essentials Plus.
• Support data protection officer with data protection matters (DPIAs).
• Coordinate audits and liaise with security teams and external providers on risk.
• Produce management reports on security performance and compliance.
• Lead security-related projects and continuous improvement initiatives.
• Provide security guidance to stakeholders and project teams.

Skills

Governance & risk

Data protection

Stakeholder management

Security awareness

Cyber security

Education

ISO 27001 Foundation

CISSP or CISM (advantageous)

ITIL Foundation

Tools

Microsoft Purview

Entra ID

Microsoft Defender Security

Cyera

Microsoft Copilot

Microsoft Word/Excel/Outlook

Job description

Fawkes & Reece Group in London is seeking an experienced Information Security Manager to join Group IT and protect a global business. You will own security governance, risk management, and regulatory compliance, embedding security into daily processes and enhancing a security-aware culture.

Working with senior security leads, you will implement policies, manage risks, run DPIAs, coordinate audits, and deliver timely security improvements across the organisation.