Information Security Manager in UNITED KINGDOM

Information Security Manager

Fully Remote

£60,000 - £65,000 + car allowance + benefits

Are you an experienced Information Security Manager with a strong GRC focus looking for your next challenge? If so, this could be the ideal opportunity for you. My client, a specialist waste management business with an excellent reputation and ambitious growth plans, are looking to hire an Information Security Manager to join the team.

Reporting into the Group IT Director this will be a stand-alone Information Security Manager role focused on governance, risk management, compliance, processes and ensuring the organisation's information security framework is robust and aligned with industry standards. You will be responsible for Information Security across the group and will be responsible for further developing the existing ISMS, ensuring that information security is at the heart of what they do as a business and that their information and their partners’ information assets are secure.

Key responsibilities

• Development and implementation of security standards, policies and processes aligned to industry best practice.
• Ensuring compliance with legislation/standards such as GDPR, PCI DSS etc.
• Management of external Information and Cyber security partners, including audits and assessments.
• Lead and manage cybersecurity projects, ensuring completion to deadlines and within budget.
• Collaborate with cross-functional teams: acting as the Information Security expert for teams across the business to ensure good information security is embedded within everything they do.
• Keep up to date with emerging Information Technology and threats.
• Ensure employees are aware of their InfoSec responsibilities and have adequate training to achieve them.

Skills and Experience required

• Proven experience within a similar Information Security Management role.
• Experience managing an ISMS (policy, procedures, Risk Management, Information Governance etc.)
• Detailed knowledge of GDPR legislation and PCI DSS framework.
• Experience managing audits against frameworks such CIS, NIST or similar.
• Ability to work with initiative, requiring minimum supervision.
• Excellent time management skills, ensuring that deadlines and priorities are met.
• CISM/CISSP qualification (desirable)
• Experience implementing ISO27001 (desirable)