InfoSec & Compliance Manager (ISO27001, GDPR)

Ward Hadaway; Newcastle upon Tyne; Hybrid; GBP 60,000 - 90,000; Full time

Benefits offered by this job

Hybrid working

Enhanced pension

Life assurance

Health and wellbeing benefits

25 days annual leave

Job summary

Ward Hadaway is recruiting an Information Security Manager to join the Risk and Compliance team, based from Newcastle or Leeds. You will drive a pragmatic, risk-based approach to protect client, employee and corporate information, and advise the IT team on security implications of changes and upgrades.

You will oversee ISO27001, Cyber Essentials and GDPR programmes, lead governance and risk assessments, and contribute to information governance initiatives across the firm.

Qualifications

• Proven leadership in information security within a professional services environment.
• In-depth knowledge of Data Protection Act 2018, UK GDPR and related regimes.
• Experience managing ISO27001 and Cyber Essentials Plus; familiarity with privacy impact assessments.

Responsibilities

• Manage ISO27001, Cyber Essentials, GDPR compliance programmes.
• Lead information security risk assessment programme and information governance initiatives.
• Advise on security implications of software/hardware deployments.
• Draft and monitor information security policies; monitor compliance and response plans.
• Investigate data breaches and support GDPR compliance efforts.

Skills

Leadership

Data protection knowledge

ISO27001 / Cyber Essentials

GDPR compliance

Communications

Risk assessment

Stakeholder management

Information security controls

Job description

Ward Hadaway is recruiting an Information Security Manager to join the Risk and Compliance team, based from Newcastle or Leeds. You will drive a pragmatic, risk-based approach to protect client, employee and corporate information, and advise the IT team on security implications of changes and upgrades.

You will oversee ISO27001, Cyber Essentials and GDPR programmes, lead governance and risk assessments, and contribute to information governance initiatives across the firm.