ISMS & Data Protection Governance Lead

iFAST Global Bank Ltd; Greater London; On-site; GBP 70,000 - 120,000; Full time

Job summary

iFAST Global Bank Ltd is seeking a senior governance-focused information security professional to maintain the ISMS, oversee data protection and resilience initiatives, and provide risk-focused reporting to senior management.

You will ensure security-by-design across initiatives, manage risk assessments, and coordinate with cyber security operations, data protection officers, and external providers to safeguard information assets.

Qualifications

• Experience in information security governance, risk and compliance.
• Strong knowledge of ISO 27001:2022 ISMS and security controls.
• Experience with UK GDPR and data protection obligations.
• Experience in incident response, business continuity and IT disaster recovery planning.
• Familiarity with AWS cloud environments and security tooling.

Responsibilities

• Maintain and continuously improve ISO 27001:2022 ISMS and related governance documents; ensure audit readiness.
• Embed security-by-design and privacy-by-design in new initiatives and projects.
• Conduct information security risk assessments and manage risk registers.
• Define and adopt security controls for information flows across internal and external boundaries.
• Serve as governance interface to security operations and liaise with technical teams.
• Coordinate threat intelligence, vulnerability management and remediation SLAs.
• Support testing of incident response, crisis management, and disaster recovery plans, including AWS environments.
• Contribute to data protection governance, DPIAs, DSARs handling and DPIA records.

Skills

Information security

Risk assessment

Data protection

Regulatory compliance

Governance

Threat intelligence

Incident response

Disaster recovery

AWS Cloud

Tools

AWS Cloud

GRC tools

Job description

iFAST Global Bank Ltd is seeking a senior governance-focused information security professional to maintain the ISMS, oversee data protection and resilience initiatives, and provide risk-focused reporting to senior management.

You will ensure security-by-design across initiatives, manage risk assessments, and coordinate with cyber security operations, data protection officers, and external providers to safeguard information assets.