ISO 27001 Security Governance Lead

The Football Association; Greater London; Hybrid; GBP 85,000 - 110,000; Full time

Benefits offered by this job

Hybrid working model

Private medical cover

Contributory pension

25 days annual leave

Job summary

The Football Association (The FA) is seeking an experienced Security Governance Audit Lead to own information security governance, audit management and ISO 27001 compliance across its Digital Technology function. You will lead the ISO 27001 programme, drive improvements, and report to senior leaders to enable better decision-making across the organisation.

You will chair governance forums, manage internal/external audits, and partner with Risk, Legal, Procurement and business teams to embed

Qualifications

• Significant experience in Information Security Governance, Risk, Compliance, Audit or Security Assurance.
• Experience implementing or maturing an ISO 27001 ISMS.
• Strong knowledge of ISO 27001 controls and audit processes.
• Experience planning and managing internal and external audits.
• Ability to create governance reports, dashboards and KPI packs for senior stakeholders.
• Excellent written communications and executive briefing skills.
• Strong presentation and stakeholder management; able to tailor messages.
• Proven ability to influence across multiple organizational levels.
• Experience juggling multiple priorities and delivering actions with minimal supervision.
• Independent, self-motivated, stand-alone specialist role.

Responsibilities

• Lead ongoing development, implementation and maturity of The FA's ISMS.
• Own and manage ISO 27001 compliance roadmap and certification readiness.
• Chair governance forums and quarterly stakeholder meetings.
• Manage internal and external security audit programme across multiple stakeholders.
• Drive governance, compliance and assurance across Digital Technology.
• Develop and communicate security KPIs, KRIs and management information.
• Produce high-quality reporting and presentations for technical and non-technical audiences.
• Review security policies, standards and controls; recommend improvements.
• Assess compliance with information security requirements across teams.
• Support supplier assurance, procurement security reviews and third-party risk management.
• Support security awareness and culture initiatives.
• Oversee governance of security incidents and remediation actions.
• Support business continuity and resilience governance.
• Build relationships as trusted SME on governance and compliance.

Skills

InfoSec governance

ISO 27001

Audit management

Governance reporting

Stakeholder management

Policy writing

Presentation skills

Analytical thinking

Third-party risk

Independent worker

Job description

The Football Association (The FA) is seeking an experienced Security Governance Audit Lead to own information security governance, audit management and ISO 27001 compliance across its Digital Technology function. You will lead the ISO 27001 programme, drive improvements, and report to senior leaders to enable better decision-making across the organisation.

You will chair governance forums, manage internal/external audits, and partner with Risk, Legal, Procurement and business teams to embed