Senior Information Security Manager - ISO 27001 Controls

BDO UK; Greater London; Hybrid; GBP 90,000 - 120,000; Full time

Benefits offered by this job

Agile working

Mentoring and coaching

Career development programs

State-of-the-art collaboration spaces

Job summary

BDO UK is seeking an Information Security Senior Manager to design and maintain an ISO 27001-aligned information security management system across the firm. You will provide expert guidance on risk management and control design, collaborating with IT, Risk, Legal and Compliance.

You will lead complex cross-functional projects, develop policy standards, and report on control effectiveness to senior management, clients and auditors.

Qualifications

• Minimum professional-services information security experience.
• Experience designing, documenting and maintaining enterprise information security controls.
• Knowledge of control design, testing, and remediation.
• Ability to map controls to policies, risks and assurance evidence.
• Experience with ISO 27001 and related frameworks.

Responsibilities

• Design and maintain an information security controls framework.
• Develop information security policies, standards and guidance.
• Coordinate annual ISMS reviews and remediation actions.
• Plan and support ISO 27001 internal audits.
• Define control objectives, ownership and evidence criteria.
• Lead cross-functional remediation initiatives.
• Provide guidance to staff on information security obligations.
• Produce reporting on control coverage and residual risk.
• Lead complex security projects through influence.

Skills

ISO 27001

Risk management

Control frameworks

Auditing & assurance

NIST CSF

Regulatory compliance

Stakeholder communication

Education

CISSP

CISM

CISA

CRISC

ISO 27001 Lead Auditor/Implementer

Tools

COBIT

NIST

ISMS tooling

Job description

BDO UK is seeking an Information Security Senior Manager to design and maintain an ISO 27001-aligned information security management system across the firm. You will provide expert guidance on risk management and control design, collaborating with IT, Risk, Legal and Compliance.

You will lead complex cross-functional projects, develop policy standards, and report on control effectiveness to senior management, clients and auditors.