ISMS Manager (ISO 27001 and Vanta)

Intelance; United Kingdom; Remote; GBP 6,700 - 10,000; Part time

Job summary

Intelance seeks an experienced ISMS Manager as an associate contractor to run client ISMS programmes day to day, within Vanta and Notion. The role covers closing audit findings, maintaining the risk register and SoA, and performing supplier security assessments across multi-country clients.

Deliverables include timely control owner follow-ups, management reviews, and support for surveillance audits. Flexible, project-based work with an experienced assurance team is offered.

Qualifications

• At least three years running or maintaining an ISO 27001 ISMS.
• Lead Implementer or Lead Auditor certification.
• Experience with UK GDPR records of processing and DPIAs.

Responsibilities

• Run the client's ISMS day to day inside Vanta and Notion.
• Close open audit non-conformities with evidence the certification body will accept.
• Keep the risk register, risk treatment plan and Statement of Applicability up to date.
• Run supplier security assessments and keep supplier records current.
• Track and chase control owners so policies, training, access reviews and device checks are done on time.
• Prepare and run the management review with the client's leadership.
• Support the independent internal audit and close any findings it raises.
• Prepare the client for the surveillance audit and support them on the day.
• Report progress each month in plain English, with clear actions, owners and dates.
• Follow Intelance quality, security, confidentiality and conflict of interest procedures.

Skills

ISO 27001 ISMS

Cloud SaaS (G Workspace / M365)

Lead Implementer/Lead Auditor

Education

Lead Implementer/Lead Auditor certificate

Tools

Vanta

Drata

Secureframe

Job description

Intelance is a UK advisory and assurance firm working across enterprise architecture, cyber assurance, AI governance and data governance. We run information security management systems (ISMS) for growing technology companies, so their engineers can stay focused on their product. We are appointing an experienced ISMS Manager as an associate contractor to run client ISMS programmes day to day.

Your first assignment is an ISO/IEC 27001:2022 certified technology company with offices in the UK and Asia. The work runs from December 2026 through their surveillance audit in April 2027, then continues monthly. Expect about 4 to 6 days a month at the start, settling to 2 to 3 days a month. You will report to our Cyber Assurance lead, who stays accountable for quality.

This is an associate panel role. Each assignment is agreed separately with a written scope, timetable and day rate.

Tasks

Run the client's ISMS day to day inside Vanta and Notion.

Close open audit non-conformities with evidence the certification body will accept.

Keep the risk register, risk treatment plan and Statement of Applicability up to date.

Run supplier security assessments and keep supplier records current.

Track and chase control owners so policies, training, access reviews and device checks are done on time.

Prepare and run the management review with the client's leadership.

Support the independent internal audit and close any findings it raises.

Prepare the client for the surveillance audit and support them on the day.

Report progress each month in plain English, with clear actions, owners and dates.

Follow Intelance quality, security, confidentiality and conflict of interest procedures.

Requirements

At least three years running or maintaining an ISO 27001 ISMS.

Taken at least one organisation through an ISO 27001 certification or surveillance audit.

Hands on experience with Vanta, or a similar platform such as Drata or Secureframe.

Good working knowledge of ISO/IEC 27001:2022 and the 2022 Annex A controls.

Experience with cloud based or SaaS businesses using Google Workspace or Microsoft 365.

Able to keep busy engineers and leaders on track without slowing their work.

Clear, concise writing that non technical leaders understand.

Based in the UK and able to work as a self-employed contractor.

ISO/IEC 27001 Lead Implementer or Lead Auditor certificate.

Experience with UK GDPR records of processing and data protection impact assessments.

Experience with companies that have offices in more than one country.

Experience with SOC 2 alongside ISO 27001.

Join Intelance's specialist cyber assurance associate panel.

Steady monthly work on a managed ISMS service that is growing.

Remote work with a written scope, timetable and agreed day rate.

Support from an experienced assurance team, with structured templates and quality review.

Flexible, project based work you can fit around other commitments.