Security Governance & ISO 27001 Audit Lead

The Football Association; Wembley; Hybrid; GBP 85,000 - 120,000; Full time

Benefits offered by this job

Hybrid working model

Private medical cover

Pension scheme

25 days annual leave

Job summary

The Football Association (The FA) is actively seeking an experienced Security Governance Audit Lead to own ISMS development, ISO 27001 compliance roadmaps and audit management across its Digital Technology function.

You will collaborate with Risk, Legal, Procurement and business teams to mature governance, report to senior leaders and drive continuous improvement while operating in a hybrid model at Wembley/St. George's Park.

Qualifications

• Significant experience in Information Security Governance, Risk, Compliance, Audit or Security Assurance roles.
• Demonstrable experience implementing or maturing an ISO 27001 ISMS.
• Strong knowledge of ISO 27001 controls, requirements and audit processes.
• Experience planning and coordinating internal and external audits.
• Experience creating governance reporting, dashboards and KPIs for senior stakeholders.
• Excellent written communication and executive briefing skills.
• Strong presentation and stakeholder management abilities.
• Proven ability to manage multiple priorities with minimal supervision.

Responsibilities

• Lead development and maturity of The FA's ISMS.
• Own ISO 27001 compliance roadmap and certification readiness.
• Chair governance forums and stakeholder meetings for ISO 27001 and security assurance.
• Manage internal and external security audit programme across multiple stakeholders.
• Drive governance, compliance and assurance across Digital Technology.
• Develop security KPIs, KRIs and reporting for risk and compliance.
• Produce high-quality reporting for technical and non-technical audiences.
• Review policies, standards and controls and recommend improvements.
• Assess compliance with information security requirements with technical teams.
• Support supplier assurance and procurement security reviews.

Skills

Information Security

ISO 27001

Audits

Stakeholder management

Reporting

Policy writing

Risk management

Tools

NIST CSF

ISMS

Job description

The Football Association (The FA) is actively seeking an experienced Security Governance Audit Lead to own ISMS development, ISO 27001 compliance roadmaps and audit management across its Digital Technology function.

You will collaborate with Risk, Legal, Procurement and business teams to mature governance, report to senior leaders and drive continuous improvement while operating in a hybrid model at Wembley/St. George's Park.