Senior Information Security Manager — ISO 27001 & Governance

The Careers & Enterprise Company; Greater London; Hybrid; GBP 75,000 - 110,000; Full time

Job summary

The Careers & Enterprise Company (CEC) is seeking a Senior Information Security Manager to lead and maintain its ISO 27001-certified information security management system. This role involves strengthening security governance, auditing, and risk management for the charity serving England’s learners.

You will work in a mission-driven team, ensuring safeguarding and data protection while guiding policy development and resilience across the organisation.

Qualifications

• At least 3 years in an information security governance role in an ISO 27001 environment.
• ISO 27001 Lead Implementer or Lead Auditor certification.
• CISSP or degree with information security focus or computer science including security modules.

Responsibilities

• Oversee CEC's ISO 27001-certified Information Security Management System and continually improve it.
• Lead business continuity management for information and technology risks.
• Support development of a proportionate quality management approach, including work towards ISO 9001 certification.

Skills

Information security governance

ISO 27001

Risk management

Stakeholder management

Microsoft tools

Education

CISSP or equivalent

Degree in information security / computer science

Tools

ISO 27001 Lead Implementer

ISO 27001 Lead Auditor

Job description

The Careers & Enterprise Company (CEC) is seeking a Senior Information Security Manager to lead and maintain its ISO 27001-certified information security management system. This role involves strengthening security governance, auditing, and risk management for the charity serving England’s learners.

You will work in a mission-driven team, ensuring safeguarding and data protection while guiding policy development and resilience across the organisation.