About this role
Salary: £50,000 - 55,000 per year
Requirements: At least 3 years experience in IT operations and 3 years experience within an enterprise information security environment.At least 5 years experience working with Microsoft information security tools, with evidence of improving compliance.At least 3 years experience maintaining an information security-accredited environment, including ISO 27001 and Cyber Essentials Plus.Strong knowledge of information security governance, risk management, data protection and compliance.Experience working with technical and cyber security teams to assess risks and deliver remediation plans.Ability to manage multiple projects, priorities and change initiatives simultaneously.Excellent communication, analytical, problem-solving and stakeholder management skills.Strong customer-focused approach, with the ability to explain security requirements clearly to technical and non-technical audiences.Experience with Microsoft Purview, Entra ID, Microsoft Defender Security, Cyera, Microsoft Copilot, Microsoft Word, Excel and Outlook would be beneficial.Relevant qualifications or equivalent practical knowledge are expected, including Microsoft Information Protection or Compliance products and ITIL Foundation.ISO 27001 Foundation, Auditor or Implementer qualifications, alongside CISSP or CISM, would be advantageous. Responsibilities: Develop, implement and maintain information security policies, procedures and governance frameworks.Manage information security risks, maintain the risk register and oversee remediation activities.Ensure compliance with ISO 27001, GDPR, Cyber Essentials Plus, and relevant contractual and regulatory requirements.Conduct risk assessments, internal audits, compliance reviews and Data Protection Impact Assessments (DPIAs).Support security incident management, business continuity planning and incident response exercises.Maintain ISO 27001 documentation, including the Statement of Applicability, and coordinate internal and external audits.Work with Cyber Security, Group IT, HR and external service providers to assess risks and implement effective security controls.Provide security guidance to stakeholders, customers and project teams, embedding security requirements into new and existing services.Promote security awareness through training, onboarding and ongoing knowledge sharing.Produce regular management reports and executive updates on security performance, risks and compliance.Manage security-related projects and continuous improvement initiatives, ensuring timely delivery and successful adoption.Support the Data Protection Officer with data protection matters, including Data Subject Access Requests where required. Technologies: CopilotExcelIncident ManagementSupportITILSecurityEmbedded More:
We are looking for an experienced, proactive, commercially aware and solutions-focused Information Security Manager to join our Group IT function in London. This is an opportunity to help protect our global business, strengthen security governance and support compliance with industry standards and regulatory requirements. You will work closely with our Senior Information Security Manager, Cyber Security Manager and wider business, engaging stakeholders at all levels and taking a pragmatic approach to improving security.
last updated 42 week of 2026