About this role
The Senior Information Security Governance Manager is responsible for maintaining Anthesis’ ISO 27001:2022 certifications across multiple business processes and ensuring the continued effectiveness of the Information Security Management System (ISMS). The role provides governance, compliance, audit, and assurance support while contributing to customer trust, vendor assurance, and regulatory compliance initiatives. It coordinates certification activities, risk management, control monitoring, audit readiness, and compliance reporting, while supporting the future implementation of ISO/IEC 42001 and broader AI governance initiatives.
- ISMS & Certification Management: Maintain and continuously improve the ISO 27001:2022 ISMS; coordinate Wallbrook, Digital, and MERO certification scopes; manage surveillance and recertification audits; maintain the Statement of Applicability, policies, standards, procedures, and evidence; track findings, corrective actions, observations, and non-conformities; and ensure ongoing audit readiness.
- Governance, Risk & Compliance: Facilitate information security risk assessments and treatment activities; monitor control effectiveness and compliance obligations; support internal control reviews and assurance activities; maintain metrics, dashboards, and reports; and improve security policies and standards.
- Client Assurance & Compliance Support: Support customer reviews, due diligence, vendor assurance, security assessments, and questionnaires; maintain evidence repositories and certification documentation; assist contract compliance reviews; and support customer and procurement requirements.
- Audit & Stakeholder Management: Coordinate internal and external auditors; work with control owners to obtain evidence and implement corrective actions; guide business and technology stakeholders; support management reviews and executive reporting; and promote security awareness and governance maturity.
- AI Governance Readiness: Support governance frameworks aligned with ISO/IEC 42001, including AI risk management, policy development, compliance activities, governance initiatives, and future certification readiness.
- Other duties as assigned by the manager.