Information Security & Governance Manager

This role can be based remotely but with travel to the office in Manchester once every 2 weeks

Salary:  £60K - £75K DOE

This is a brand new role and an exciting one with a clear career progression pathway.  Working for one of the fastest growing SaaS providers in the UK the role will provide the right candidate a route to CISO, leading a small team.

The main purpose of the role is to develop, monitor and maintain the ISO 27001 Information Security Management System and data privacy management framework.  Help support clients with their Information Security and Information Governance due diligence and assurance exercises.

Key responsibilities:

• Perform Security Risk Assessments and identify ways to minimise threats.
• Conduct a continuous assessment of current Security and Privacy Practices and Systems, identifying areas for improvement.
• Raise awareness and profile of Information Security and Data Privacy internally and with our clients.
• Ensure that all ISMS policies are reviewed annually and updated as appropriate.
• Conducting Internal Audits to ensure that Security and Data Privacy controls are effective.
• Facilitate and manage external audits undertaken by certifying body for ISO27001 Audit
• Define an audit plan and manage all internal audits relating to ISO27001 and ensure their effective delivery.
• Management and co-ordination of the Audit and Risk Committee.
• Engage proactively with Dev Ops / Product /IT on risk assessment of products, services and third-party suppliers.

Key Skills & Experience required:

• Relevant qualification in cybersecurity, Computer Science or related IT Discipline
• Experience of managing and maintaining the ISO 27001 InfoSec, Management System and data privacy framework
• Specific knowledge and experience of GDPR, Information Security, DPIA processes
• Experience of interacting with the ICO
• Professional experience with presentations and engagement with Audit & Risk Committees
• Excellent interpersonal skills and the ability to engage with stakeholders at all levels