ISO 27001 GRC Lead: ISMS Architect & Certification Champion

Barclay Simpson; Greater London; Hybrid; GBP 70,000 - 110,000; Full time

Job summary

Barclay Simpson is seeking an experienced ISO 27001 Lead to drive end-to-end implementation and certification across a global organisation. You will design, build and operationalise the ISMS in line with ISO/IEC 27001:2022.

Responsibilities include conducting enterprise-wide gap assessments, defining scope and governance, developing risk registers and SoA, and delivering a budgeted implementation roadmap with cross-functional collaboration across Technology, Security, Legal, HR and Procurement.

Qualifications

• Proven track record leading ISO 27001 certification end-to-end in complex environments.
• Strong knowledge of ISO/IEC 27001:2022 and ISO 27002:2022.
• Experience implementing risk management frameworks and ISMS governance.
• Cloud security familiarity (Azure/M365, AWS, GCP) and core disciplines (IAM, monitoring, incident & vulnerability management).
• Strong stakeholder engagement and programme delivery capability.

Responsibilities

• Conduct enterprise-wide ISO 27001:2022 gap assessment.
• Define ISMS scope, context, governance and risk methodology.
• Develop the risk register, SoA and risk treatment plans.
• Deliver a prioritised implementation roadmap including budget, resourcing and timelines.
• Establish ISMS governance, metrics, management review and audit readiness.
• Coordinate cross-functionally with Technology, Security, Legal, HR, Procurement and Business Units.

Skills

ISO 27001 knowledge

Cloud security familiarity

Stakeholder engagement

Program delivery

Job description

Barclay Simpson is seeking an experienced ISO 27001 Lead to drive end-to-end implementation and certification across a global organisation. You will design, build and operationalise the ISMS in line with ISO/IEC 27001:2022.

Responsibilities include conducting enterprise-wide gap assessments, defining scope and governance, developing risk registers and SoA, and delivering a budgeted implementation roadmap with cross-functional collaboration across Technology, Security, Legal, HR and Procurement.