Security Manager: PCI & ISO 27001 GRC Lead

ISR RECRUITMENT LIMITED; Leeds; Hybrid; GBP 60,000 - 70,000; Full time

Benefits offered by this job

Excellent company benefits and Incenti

Job summary

ISR RECRUITMENT LIMITED is seeking an experienced Security Manager to lead governance, risk and compliance across UK and European operations. The role focuses on PCI DSS, ISO 27001 and Cyber Essentials Plus, with responsibility for audits, risk registers and incident response.

The successful candidate will coordinate vulnerability management, support business continuity, and engage with external auditors and stakeholders to raise security standards across the organisation.

Qualifications

• Minimum 3 years in a Security Manager, Information Security Manager, GRC Manager or similar role.
• Demonstrable experience leading PCI DSS compliance/certification, including audits, remediation and ongoing compliance.
• Demonstrable experience leading ISO 27001 certification and ongoing ISMS compliance.
• Experience with Cyber Essentials Plus.
• Experience maintaining and managing security risk registers.
• Experience coordinating vulnerability scanning, penetration testing and remediation.
• Information security incident management/investigation experience.
• Experience with Microsoft 365, Azure and AWS environments.
• Strong stakeholder management and communication skills.
• Experience working with external auditors and third-party security assessments.
• Security certifications such as CISSP, CISA or ISO 27001 Lead Auditor/Implementer would be advantageous.

Responsibilities

• Managing compliance with PCI DSS, ISO 27001, ISO 22301 and Cyber Essentials Plus.
• Conducting security risk assessments, internal audits and control reviews.
• Maintaining and monitoring the organisational security risk register.
• Coordinating vulnerability scanning, penetration testing and remediation.
• Supporting information security incident investigation and resolution.
• Supporting business continuity and resilience planning.
• Coordinating third-party security audits across European operations.
• Working with technical and non-technical stakeholders across the UK and internationally to continuously improve security practices.

Skills

PCI DSS

ISO 27001

Cyber Essentials Plus

Risk management

Vulnerability management

Audits & remediations

Stakeholder management

Incident response

Cloud platforms (AWS/Azure)

Microsoft 365

Tools

AWS

Azure

Microsoft 365

Office 365

Job description

ISR RECRUITMENT LIMITED is seeking an experienced Security Manager to lead governance, risk and compliance across UK and European operations. The role focuses on PCI DSS, ISO 27001 and Cyber Essentials Plus, with responsibility for audits, risk registers and incident response.

The successful candidate will coordinate vulnerability management, support business continuity, and engage with external auditors and stakeholders to raise security standards across the organisation.