ISO 27001 Security Governance Leader

DLA Piper; Greater London; Vor Ort; GBP 60.000 - 90.000; Vollzeit

Zusammenfassung

DLA Piper is seeking a dedicated Information Security Assurance Lead to sustain ISO 27001:2022 and coordinate audits across internal and external stakeholders. You will manage policies, drive continual improvement, and ensure governance aligns with business objectives and risk tolerance.

The role collaborates with the risk team to mature security controls, report outcomes, and respond to client security requests, ensuring compliance with regulatory and contractual obligations.

Qualifikationen

• Experience operating or supporting an ISO 27001 information security management system.
• Knowledge of information security control frameworks and assurance methodologies.
• Knowledge of Cyber Essentials Plus.
• Ability to assess the effectiveness of security controls and identify improvement opportunities.
• Experience coordinating audit, certification or assurance activities.
• Ability to translate technical and governance topics into practical business outcomes.
• Experience presenting security findings, recommendations and risk information to stakeholders.
• Experience identifying, assessing and managing information security risks.
• Understanding of information security threats, vulnerabilities and control environments.
• Experience applying risk management principles, frameworks and methodologies.
• Ability to evaluate the potential business impact of security risks and control gaps.

Aufgaben

• Own and maintain the ISO 27001:2022 Information Security Management System.
• Coordinate internal and external certification audits.
• Manage the lifecycle of policies, standards and supporting documentation.
• Facilitate management reviews and support continual improvement activities.
• Ensure security governance processes remain aligned to business objectives and evolving risk.
• Design and operate a programme of security control testing and assurance activities.
• Assess the effectiveness of administrative, technical and operational controls.
• Produce assurance reports and communicate outcomes to relevant stakeholders.
• Monitor remediation activities and support closure of identified weaknesses.
• Develop assurance dashboards, metrics and management reporting.
• Support the ongoing maturity of the security governance framework.
• Review the impact of regulatory, industry and client requirements on the control environment.
• Contribute to internal security awareness and governance initiatives.
• Support external client requests relating to security assurance and certification activities where required.
• Facilitate identification, assessment and evaluation of security risks.
• Provide analysis and recommendations to support risk-based decisions.
• Monitor risk treatment activities and provide challenge where appropriate.
• Support risk acceptance and exception management processes.

Kenntnisse

ISO27001 knowledge

Control frameworks

Cyber Essentials Plus

Evaluate controls

Audit coordination

Translate governance

Present security findings

Risk identification & management

Threats & vulnerabilities

Risk management principles

Business impact evaluation

Jobbeschreibung

DLA Piper is seeking a dedicated Information Security Assurance Lead to sustain ISO 27001:2022 and coordinate audits across internal and external stakeholders. You will manage policies, drive continual improvement, and ensure governance aligns with business objectives and risk tolerance.

The role collaborates with the risk team to mature security controls, report outcomes, and respond to client security requests, ensuring compliance with regulatory and contractual obligations.