ISMS Manager (ISO 27001 and Vanta)

Intelance; Greater London; Remote; GBP 111,000 - 148,000; Full time

Benefits offered by this job

Remote work with written scope

Flexible project-based work

Support from assurance team

Structured templates and quality check

Job summary

Intelance is recruiting an experienced ISMS Manager as an associate contractor to run client ISMS programmes day to day, including ISO 27001:2022 activities across the UK and Asia. The role covers surveillance audits, ongoing management and continuous improvement, with a focus on evidence-driven controls.

Reporting to the Cyber Assurance lead, you will manage risks, run supplier assessments, maintain the risk register and ensure timely closure of findings.

Qualifications

• At least three years running or maintaining an ISO 27001 ISMS.

Responsibilities

• Run the client's ISMS day to day inside Vanta and Notion.
• Close open audit non-conformities with evidence the certification body will accept.
• Keep the risk register, risk treatment plan and Statement of Applicability up to date.
• Run supplier security assessments and keep supplier records current.
• Track and chase control owners so policies, training, access reviews and device checks are done on time.
• Prepare and run the management review with the client's leadership.
• Support the independent internal audit and close any findings it raises.
• Prepare the client for the surveillance audit and support them on the day.
• Report progress each month in plain English, with clear actions, owners and dates.
• Follow Intelance quality, security, confidentiality and conflict of interest procedures.

Skills

ISO 27001 expertise

Audit management

Stakeholder communication

Self-employed contracting

Education

ISO/IEC 27001 Lead Implementer

ISO/IEC 27001 Lead Auditor

Tools

Vanta

Drata

Secureframe

Google Workspace

Microsoft 365

Job description

Intelance is a UK advisory and assurance firm working across enterprise architecture, cyber assurance, AI governance and data governance. We run information security management systems (ISMS) for growing technology companies, so their engineers can stay focused on their product. We are appointing an experienced ISMS Manager as an associate contractor to run client ISMS programmes day to day.

Your first assignment is an ISO/IEC 27001:2022 certified technology company with offices in the UK and Asia. The work runs from December 2026 through their surveillance audit in April 2027, then continues monthly. Expect about 4 to 6 days a month at the start, settling to 2 to 3 days a month. You will report to our Cyber Assurance lead, who stays accountable for quality.

This is an associate panel role. Each assignment is agreed separately with a written scope, timetable and day rate.

Tasks

• Run the client's ISMS day to day inside Vanta and Notion.

• Close open audit non-conformities with evidence the certification body will accept.

• Keep the risk register, risk treatment plan and Statement of Applicability up to date.

• Run supplier security assessments and keep supplier records current.

• Track and chase control owners so policies, training, access reviews and device checks are done on time.

• Prepare and run the management review with the client's leadership.

• Support the independent internal audit and close any findings it raises.

• Prepare the client for the surveillance audit and support them on the day.

• Report progress each month in plain English, with clear actions, owners and dates.

• Follow Intelance quality, security, confidentiality and conflict of interest procedures.

Requirements

Essential

• At least three years running or maintaining an ISO 27001 ISMS.

• Taken at least one organisation through an ISO 27001 certification or surveillance audit.

• Hands on experience with Vanta, or a similar platform such as Drata or Secureframe.

• Good working knowledge of ISO/IEC 27001:2022 and the 2022 Annex A controls.

• Experience with cloud based or SaaS businesses using Google Workspace or Microsoft 365.

• Able to keep busy engineers and leaders on track without slowing their work.

• Clear, concise writing that non technical leaders understand.

• Based in the UK and able to work as a self-employed contractor.

Desirable

• ISO/IEC 27001 Lead Implementer or Lead Auditor certificate.

• Experience with UK GDPR records of processing and data protection impact assessments.

• Experience with companies that have offices in more than one country.

• Experience with SOC 2 alongside ISO 27001.

Benefits

• Join Intelance's specialist cyber assurance associate panel.

• Steady monthly work on a managed ISMS service that is growing.

• Remote work with a written scope, timetable and agreed day rate.

• Support from an experienced assurance team, with structured templates and quality review.

• Flexible, project based work you can fit around other commitments.