ISO 27001 Implementation Lead - Life Sciences

NRG.; United Kingdom; On-site; GBP 101,000 - 138,000; Full time

Job summary

NRG is supporting a life sciences organisation that is beginning an ISO 27001 implementation. The contract starts October 2026 for an initial 3 months, with potential extension to 6 months, and it is day-rate based.

You will assess current position, perform gap analysis, develop the ISMS including policies, risk registers and SOA, and help implement controls and prepare for audits. Strong documentation, stakeholder engagement and knowledge transfer across teams are essential.

Qualifications

• Proven experience delivering an ISO 27001 implementation from an early stage.
• Strong knowledge of ISO 27001:2022, information security risk management and control implementation.
• A technical, security engineering or information security background.
• Strong documentation, stakeholder engagement and knowledge-transfer skills.
• Experience within life sciences, pharmaceuticals or another regulated environment would be advantageous.

Responsibilities

• Assess the current position, conduct a gap analysis and identify areas of non-compliance.
• Develop the ISMS, including policies, procedures, risk registers, treatment plans and the Statement of Applicability.
• Recommend and support the implementation of practical technical and security controls.
• Gather evidence and prepare the department for internal and external audits.
• Transfer knowledge to the internal team and help create an approach that can be rolled out across other departments and operating companies.

Skills

Information security

Stakeholder engagement

Documentation

Risk management

Knowledge transfer

Education

ISO 27001 qualifications

Job description

NRG is supporting a life sciences organisation that is beginning an ISO 27001 implementation. The contract starts October 2026 for an initial 3 months, with potential extension to 6 months, and it is day-rate based.

You will assess current position, perform gap analysis, develop the ISMS including policies, risk registers and SOA, and help implement controls and prepare for audits. Strong documentation, stakeholder engagement and knowledge transfer across teams are essential.