Senior Information Security Manager

Ascend Consulting; Farringdon; Hybrid; GBP 60,000 - 65,000; Full time

Job summary

Ascend Consulting in London is seeking a Senior Information Security Manager to lead and continually improve our ISO 27001-compliant Information Security Management System. You will oversee information security standards, governance, audits, and risk management, ensuring data is secure.

Reporting to the Head of Compliance, the role offers hybrid or remote work and a salary up to £65,000. The ideal candidate has 3–5 years in security governance, relevant ISO 27001 certifications, and strong

Qualifications

• At least 3 years experience in an information security governance role; 5 years is preferred
• ISO 27001 Lead Implementer or Lead Auditor certification required
• CISSP, or a degree or equivalent Level 6+ qualification focused on information security or computer science with relevant security modules
• Broad information security and governance experience including risk assessment, control management, audits, process improvement, staff training, incident management and policy development
• Good knowledge of current information security threats and information security governance best practices
• Strong organisational skills, attention to detail and delivery-focused approach
• Ability to build and maintain strong working relationships across teams and work through ambiguity
• Practical problem-solving skills and willingness to escalate significant risks
• Confidence using Microsoft tools and adapting to new technologies
• Understanding of quality management or willingness to develop this knowledge is an advantage

Responsibilities

• Lead and continually improve our ISO 27001-certified Information Security Management System
• Oversee information security standards, governance, audits, and monitoring
• Manage information risk and help ensure our data is secure
• Lead business continuity management for information and technology risks
• Support our development of a proportionate quality management approach, including work towards ISO 9001 certification
• Strengthen our processes and contribute to policy development
• Develop training and guidance for staff
• Manage and review security incidents

Skills

Information security governance

Risk assessment

Audits (internal/third-party)

Policy development

Incident management

Business continuity

Stakeholder relationships

Delivery-focused

Ambiguity handling

Microsoft tools proficiency

Education

ISO 27001 Lead Implementer

ISO 27001 Lead Auditor

CISSP

Degree in information security or computer science (Level 6+)

Job description

Salary: £60,000 - 65,000 per year

Requirements:

• At least 3 years experience in an information security governance role within an ISO 27001-certified environment; 5 years is preferred
• ISO 27001 Lead Implementer or Lead Auditor certification
• CISSP, or a degree or equivalent Level 6 or above qualification focused on information security, computer science, or a similar field with relevant security modules
• Broad information security and governance experience, including risk assessment, control management, internal and third-party audits, process improvement, staff training and guidance, incident management and review, and policy development
• Good knowledge of current information security threats and information security management and governance best practices
• Strong organisational skills, attention to detail, and a delivery-focused approach
• Ability to build and maintain strong working relationships across teams and work through ambiguity
• Practical problem-solving skills and willingness to escal significant risks
• Confidence using Microsoft tools and adapting to new technologies
• Understanding of quality management, or willingness to develop this knowledge, is an advantage

Responsibilities:

• Lead and continually improve our ISO 27001-certified Information Security Management System
• Oversee information security standards, governance, audits, and monitoring
• Manage information risk and help ensure our data is secure
• Lead business continuity management for information and technology risks
• Support our development of a proportionate quality management approach, including work towards ISO 9001 certification
• Strengthen our processes and contribute to policy development
• Develop training and guidance for staff
• Manage and review security incidents

Technologies:

• Incident Management
• Support
• Security

More:

We are a leading independent authority seeking a Senior Information Security Manager to play a pivotal role in our Compliance team. Reporting to our Head of Compliance, you will help shape policy and provide assurance that our data is secure. The role is based in London, with hybrid or remote working, and offers a salary of up to £65,000.