ISMS & GRC Lead — Hybrid Role in Manchester

Vix Technology & Kuba; Manchester; Hybrid; GBP 55,000 - 75,000; Full time

Benefits offered by this job

Hybrid work model

Job summary

Vix Technology is seeking an Information Security & GRC Specialist to own and continually improve our ISMS in Manchester on a hybrid basis. You’ll coordinate ISO 27001 activities, prepare for audits, manage evidence and drive remediation across Security, Engineering and the business.

You'll gain exposure to PCI DSS and governance, risk and compliance, working with technical and non-technical teams to translate requirements into practical actions and secure our transport and payments platforms.

Qualifications

• Experience with ISO 27001 and an ISMS, including audit preparation, evidence management and remediation.
• Knowledge of information security governance, risk and compliance and ability to work with technical and non-technical teams.
• Experience with PCI DSS or working in a regulated technology environment would be a bonus.
• Certifications such as ISO 27001 Lead Implementer/Auditor, CISA, CRISC or CISSP welcome but not essential.

Responsibilities

• Own the day-to-day coordination and continuous improvement of the ISMS.
• Support ISO 27001 certification, surveillance and internal audits.
• Coordinate audit evidence and close findings with stakeholders.
• Maintain security policies, procedures, controls and compliance documentation.
• Support PCI DSS and wider security compliance and assurance activities.
• Track and report on compliance status, risks and upcoming audits.
• Help develop our approach across ISO 27017, 27018 and 22301.

Skills

ISO 27001

ISMS

Audit prep

PCI DSS

Governance

Stakeholders

Job description

Vix Technology is seeking an Information Security & GRC Specialist to own and continually improve our ISMS in Manchester on a hybrid basis. You’ll coordinate ISO 27001 activities, prepare for audits, manage evidence and drive remediation across Security, Engineering and the business.

You'll gain exposure to PCI DSS and governance, risk and compliance, working with technical and non-technical teams to translate requirements into practical actions and secure our transport and payments platforms.