Risk jobs in United Kingdom
Compliance & Information Security Manager
Agilio Software Bidco Limited
Senior Capital Actuary
High Finance (UK) Limited
Work From Home : Entry-Level Forex Trader — Torbay, UK | Full Time
Maverick Currencies
Finance & Resources Director
Internet Watch Foundation
Discover more opportunities than anywhere else. Find more jobs nowAgile Delivery Lead: End-to-End Projects
Entain
ROCC Support Manager
North West Ambulance Service NHS Trust
Electrical Engineer
Skillmatch Recruitment Ltd
Connect with headhunters to apply for similar jobsPhysician Assistant
South West Yorkshire Partnership NHS Trust
Operations Controller and Scheduler
Complii
Senior Pricing Strategist – Insurance Analytics Leader
esure Group
Healthcare Support Worker - Alexandra Hospital
Worcestershire Acute Hospitals NHS Trust
PCI-DSS GRC & Payments Compliance Manager
e-resourcing Limited
Advanced Nurse Practitioner
Forge Close Surgery
IT Quality, Risk & Compliance Lead (Pharma)
Experis
Clinical Research Nurse
Layton Medical Centre
Clinical Sister/Charge Nurse (UCR)
South Tees Hospitals NHS Foundation Trust
Technical Instructor
Pennine Care NHS FT
Maintenance Operative - Plumbing
NHS Property Services Ltd
Anaesthetic Practitioner / ODP
Ashford & St. Peter's Hospitals NHS Foundation Trust
Electrical Maintenance Engineer
E3 Recruitment
Compliance & Information Security Manager
Job summary
A leading software solutions provider in the UK is looking for a Compliance & Information Security Manager to enhance its compliance and security posture. This role involves managing certifications, audits, and compliance with various regulations like ISO 27001 and GDPR. The ideal candidate will have hands-on experience in compliance management, strong organizational skills, and excellent communication abilities. The position is home-based with occasional travel to offices and suppliers.
Qualifications
- Proven experience in compliance management and information security.
- Ability to manage certifications and audits effectively.
- Experience in delivering security training to staff.
Responsibilities
- Maintain the Information Security Management System (ISMS).
- Oversee Cyber Essentials Plus certification.
- Manage data protection compliance as Data Protection Officer.
Skills
Background:
Agilio Software Group is the UK’s largest provider of back‑office, compliance, and workforce solutions in primary care and dental. We have ambitious and exciting growth plans and are looking for talented individuals to join us on this journey.
The Compliance & Information Security Manager Role:
We are recruiting for a Compliance & Information Security Manager to maintain and enhance the company’s compliance and information security posture. You will manage certifications, audits, and governance activities, ensuring ongoing compliance with ISO 27001, PCI‑DSS, Cyber Essentials Plus, GDPR, and other relevant standards and regulations.
Home‑based with occasional travel to company offices and suppliers.
- Maintain and improve the company’s Information Security Management System (ISMS) in line with ISO 27001.
- Oversee annual Cyber Essentials Plus certification and ensure ongoing compliance.
- Run internal and support external security audits, assessments, and penetration tests.
- Manage security awareness training and internal communication of security policies.
- Maintain risk registers, track remedial actions, and report key risks to senior management.
- Act as the company’s Data Protection Officer (DPO), managing data protection compliance and incident reporting under UK GDPR.
- Ensure compliance with PCI‑DSS and the NHS DSP Toolkit, coordinating with relevant teams and suppliers.
- Maintain documentation, policies, and procedures for compliance frameworks.
- Coordinate responses to customer security questionnaires and due‑diligence requests.
- Monitor and report on compliance performance metrics.
- Work with IT, Engineering, and Product teams to embed secure‑by‑design practices.
- Support incident response investigations and post‑incident reviews.
- Recommend and track improvements to information security and data protection practices.
- Stay informed on relevant regulatory updates and industry trends.
- Hands‑on experience managing or supporting ISO 27001 and Cyber Essentials Plus certifications.
- Working knowledge of PCI‑DSS, GDPR, and general data protection principles.
- Experience coordinating audits and maintaining compliance documentation.
- Strong organisational skills with attention to detail and ability to manage multiple projects.
- Excellent communication and stakeholder management skills across business units.
If you feel you have what it takes to join our team, we look forward to receiving your application!
* The salary benchmark is based on the target salaries of market leaders in their relevant sectors. It is intended to serve as a guide to help Premium Members assess open positions and to help in salary negotiations. The salary benchmark is not provided directly by the company, which could be significantly higher or lower.