Group Information Security ManagerLocation: Blackfriars, London – hybridSalary: £60-65K plus excellent benefits packageContract: 12-month fixed term contract, with possibility of extensionAbout the OpportunityOur client is a UK-based, purpose-led organisation that partners with public, private and third sector bodies to design, test and scale practical innovations that improve outcomes for people and communities.They are now seeking an experienced Group Information Security Manager to join their IT team. This is an elevated Manager-level role, created to support the merger of two existing Information Security Management Systems into one coherent Group-wide framework.The Information Security strategy is already in place, so this role is focused on execution, delivery, stakeholder management and clear communication. It will suit a hands-on player-manager who can improve processes, embed controls, coordinate audit readiness and bring people with them across a complex, multi-entity environment.Key RequirementsYou will be an experienced Information Security Manager, ISMS Manager, Information Security Lead, Cyber Security Governance Manager or similar, with strong practical experience across security governance, risk, compliance, audit readiness and ISMS delivery. You will ideally bring:Strong experience managing Information Security in a complex organisation or group structureExcellent knowledge of ISO 27001, ideally including ISO 27001:2022Experience with Cyber Essentials and Cyber Essentials PlusStrong understanding of ISMS management, implementation and continuous improvementExperience supporting or leading internal and external auditsAbility to manage audit preparation, evidence gathering, remediation and follow-up actionsStrong knowledge of information security risk management, asset registers, risk logs and treatment plansExperience improving practical security processes, controls and reportingWorking knowledge of GDPR, the Data Protection Act and wider data protection implicationsExperience with incident management, corrective actions and remediation trackingStrong stakeholder management skills, with the ability to influence without direct authorityExperience working across multiple entities, departments or subsidiaries would be highly valuablePrior experience merging or aligning ISMS frameworks would be a significant advantageDesirable knowledge of NIST and qualifications such as CISMYou will be a clear communicator, practical problem solver and organised delivery-focused professional who can balance governance requirements with real-world implementation.Role & ResponsibilitiesAs Group Information Security Manager, you will support the continued maturity of Information Security across the organisation and its subsidiaries, with a strong focus on implementation and operational delivery. Your responsibilities will include:Supporting the merger of two existing ISMS frameworks into one Group-wide modelHelping to reduce duplication, clarify accountability and improve visibility across entitiesDelivering against the existing Information Security roadmapEmbedding Information Security into day-to-day business processes and decision-makingTranslating security requirements into clear, proportionate and usable guidance for staffSupporting compliance and audit activity for ISO 27001, Cyber Essentials and Cyber Essentials PlusCoordinating audit preparation, staff readiness, evidence collection and remediation activityActing as a key point of contact for external auditors and certification bodiesPreparing and supporting Information Security Management ReviewsSupporting the cross-organisational Security Forum and Audit and Risk Committee reportingMaintaining Information Security policies, standards, risk logs, asset registers and treatment plansConducting security reviews and assessments across the organisationManaging the Corrective Action Plan and improving tracking of risks, incidents and actionsSupporting third-party and supplier security assessments, including cloud-based servicesInvestigating and coordinating responses to Information Security incidentsWorking closely with IT, Technical Architecture, Finance, Legal and business stakeholdersSupporting Business Continuity Planning, Disaster Recovery Planning and resilience testingWhy Join?This is an excellent opportunity to step into a visible Group Information Security Manager role where the focus is on practical delivery, not just policy ownership.You will play a key part in merging and maturing the organisation’s ISMS framework, improving audit readiness, strengthening controls and helping embed a clear, practical security culture across a purpose-led organisation.The role offers hybrid working from Blackfriars, London, flexible working options and the chance to make a meaningful impact across a collaborative, multi-entity environment.
read more