Security Governance & Risk Lead

Fawkes & Reece London; Greater London; Sur place; GBP 80 000 - 110 000; Plein temps

Résumé du poste

Fawkes & Reece London is seeking an experienced Information Security Manager to join our Group IT function in London. You will own information security governance, policy development and risk management to protect a global business and ensure regulatory compliance.

Working with the Senior Information Security Manager and cyber teams, you will embed security into processes, coordinate audits and DPIAs, manage incidents and business continuity, and promote a security-minded culture across the

Qualifications

• Qualifications include Microsoft Information Protection or Compliance products and ITIL Foundation.
• ISO27001 Foundation, Auditor or Implementer qualifications are advantageous.
• CISSP or CISM qualifications would be advantageous.

Responsabilités

• Develop, implement and maintain information security policies, procedures and governance frameworks.
• Manage information security risks, maintain the risk register and oversee remediation activities.
• Ensure compliance with ISO 27001, GDPR and Cyber Essentials Plus, alongside relevant contractual and regulatory requirements.
• Conduct risk assessments, internal audits, compliance reviews and Data Protection Impact Assessments (DPIAs).
• Support the management of security incidents, business continuity planning and incident response exercises.
• Maintain ISO 27001 documentation, including the Statement of Applicability, and coordinate internal and external audits.
• Work closely with Cyber Security, Group IT, HR and external service providers to assess risks and implement effective security controls.
• Provide security guidance to stakeholders, customers and project teams, ensuring security requirements are embedded into new and existing services.
• Promote security awareness through training, onboarding and ongoing knowledge sharing.
• Produce regular management reports and executive updates on security performance, risks and compliance.
• Manage security-related projects and continuous improvement initiatives, ensuring timely delivery and successful adoption.
• Support the Data Protection Officer with data protection matters, including Data Subject Access Requests where required.

Connaissances

Governance

Risk management

Data protection

Incident response

Stakeholder management

ISO27001

Cybersecurity tools

Communication skills

Formation

ITIL Foundation

ISO 27001 Foundation

CISSP

CISM

Microsoft Information Protection

Outils

Microsoft Purview

Entra ID

Microsoft Defender Security

Cyera

Microsoft Copilot

Microsoft Word

Microsoft Excel

Microsoft Outlook

Description du poste

Fawkes & Reece London is seeking an experienced Information Security Manager to join our Group IT function in London. You will own information security governance, policy development and risk management to protect a global business and ensure regulatory compliance.

Working with the Senior Information Security Manager and cyber teams, you will embed security into processes, coordinate audits and DPIAs, manage incidents and business continuity, and promote a security-minded culture across the