IT Security Governance Lead — ISO 27001 & Compliance (Hybrid)

Clear Business group; Sale; Hybrid; GBP 85,000 - 110,000; Full time

Benefits offered by this job

Annual bonus

Hybrid working

25 days holiday

Pension contributions

Wellbeing support

Employee discounts

Job summary

Clear Business is seeking an IT Security Governance Lead to shape and run governance, risk, and compliance across technology services. You will maintain ISMS alignment with ISO 27001, coordinate audits, manage risk registers and reporting, and partner with Legal, Compliance and Risk stakeholders to drive robust controls.

The role emphasizes evidence-based assurance, supplier security reviews, and ongoing governance improvements, with hybrid working and a competitive benefits package.

Qualifications

• Experience in information security governance, risk, compliance, audit or assurance environments.
• Experience supporting security frameworks and certifications such as ISO 27001, Cyber Essentials, PCI DSS, GDPR.
• Experience coordinating audits, managing evidence, engaging stakeholders and tracking remediation activities.
• Experience conducting security risk assessments and maintaining risk or issue registers.
• Strong documentation skills and ability to produce clear governance records and audit materials.

Responsibilities

• Develop, maintain and review information security policies, standards, procedures and governance documentation.
• Maintain and improve the ISMS and governance framework aligned to ISO 27001.
• Support security certifications, audits and compliance activities with evidence prepared.
• Identify, assess and report information security risks, maintaining risk registers and coordinating mitigations.
• Coordinate internal and external security audits, managing findings and remediation actions through to completion.
• Conduct supplier security assurance and due diligence activities across the supplier lifecycle.
• Provide input into technology changes, projects, vulnerability management and security assessments.
• Produce security reporting, dashboards and governance updates for informed decision-making.

Skills

Information security governance

Risk management

Audit & assurance

Stakeholder engagement

Policy development

Documentation

Tools

Microsoft 365

Job description

Clear Business is seeking an IT Security Governance Lead to shape and run governance, risk, and compliance across technology services. You will maintain ISMS alignment with ISO 27001, coordinate audits, manage risk registers and reporting, and partner with Legal, Compliance and Risk stakeholders to drive robust controls.

The role emphasizes evidence-based assurance, supplier security reviews, and ongoing governance improvements, with hybrid working and a competitive benefits package.