Security Governance & ISO 27001 Lead

The FA; Greater London; Hybrid; GBP 75,000 - 110,000; Full time

Benefits offered by this job

Hybrid working model

Private medical cover

Contributory pension

25 days annual leave

Event tickets & engagement

Job summary

The FA is seeking a Security Governance Audit Lead to own information security governance, audit management and compliance across its Digital Technology function. You will lead the ISO 27001 programme, coordinate audits, and drive improvements with a broad set of stakeholders including Risk, Legal, Procurement and the wider business.

You will operate independently, build credibility quickly and act as a trusted advisor on governance, risk and compliance matters, shaping a mature security

Qualifications

• Significant experience in Information Security Governance, Risk, Compliance, Audit or Security Assurance roles.
• Experience implementing or maturing an ISO 27001 ISMS.
• Strong knowledge of ISO 27001 controls, requirements and audit processes.
• Experience planning, coordinating and managing internal and external audits.
• Experience producing governance reporting, dashboards and executive briefings.
• Excellent written communication and stakeholder management skills.
• Ability to work independently and influence across multiple levels.

Responsibilities

• Lead development, implementation and maturity of The FA's ISMS.
• Own ISO 27001 compliance roadmap and certification readiness.
• Chair governance forums and stakeholder meetings on ISO 27001 and security assurance.
• Manage internal and external security audits across multiple functions.
• Drive governance, compliance and assurance across Digital Technology.
• Develop security KPIs, KRIs and management information for risk reporting.
• Produce high-quality reports and presentations for technical and non-technical audiences.
• Review security policies and controls and recommend improvements.
• Partner with technical teams to assess information security controls.
• Support supplier assurance, due diligence and procurement security reviews.
• Support security awareness and culture initiatives across the organisation.
• Oversee governance of security incidents and remediation actions.
• Support business continuity and resilience governance activities.
• Build relationships and act as subject matter expert on governance and compliance.

Skills

ISO 27001 governance

Audit management

Stakeholder management

Policy & reporting

Risk assessment

Third-party risk

Independent working

Job description

The FA is seeking a Security Governance Audit Lead to own information security governance, audit management and compliance across its Digital Technology function. You will lead the ISO 27001 programme, coordinate audits, and drive improvements with a broad set of stakeholders including Risk, Legal, Procurement and the wider business.

You will operate independently, build credibility quickly and act as a trusted advisor on governance, risk and compliance matters, shaping a mature security