We are looking for an experienced and proactive Information Security Manager to join our Group IT function in London. This is an excellent opportunity for an information security professional to play a key role in protecting a global business, strengthening security governance and ensuring compliance with industry standards and regulatory requirements.
Working closely with the Senior Information Security Manager, Cyber Security Manager and wider business, you will take ownership of information security policies, risk management, data protection and business continuity. You will play a hands-on role in embedding security into everyday business processes, improving compliance and promoting a strong security-aware culture across the organisation.
Key Responsibilities
Develop, implement and maintain information security policies, procedures and governance frameworks.
Manage information security risks, maintain the risk register and oversee remediation activities.
Ensure compliance with ISO 27001, GDPR and Cyber Essentials Plus, alongside relevant contractual and regulatory requirements.
Conduct risk assessments, internal audits, compliance reviews and Data Protection Impact Assessments (DPIAs).
Support the management of security incidents, business continuity planning and incident response exercises.
Maintain ISO 27001 documentation, including the Statement of Applicability, and coordinate internal and external audits.
Work closely with Cyber Security, Group IT, HR and external service providers to assess risks and implement effective security controls.
Provide security guidance to stakeholders, customers and project teams, ensuring security requirements are embedded into new and existing services.
Promote security awareness through training, onboarding and ongoing knowledge sharing.
Produce regular management reports and executive updates on security performance, risks and compliance.
Manage security-related projects and continuous improvement initiatives, ensuring timely delivery and successful adoption.
Support the Data Protection Officer with data protection matters, including Data Subject Access Requests where required.About You
You will be a commercially aware and solutions-focused information security professional with the confidence to engage stakeholders at all levels. You will combine strong technical understanding with excellent governance, risk and compliance expertise, taking a pragmatic approach t...
Information Security Manager employer: Fawkes & Reece London
Join a leading Tier 1 contractor in Central London, where you will thrive in a dynamic and high-energy environment while contributing to impactful projects across various sectors. With a strong focus on employee growth, the company offers competitive salaries, hybrid working options, and comprehensive benefits including private healthcare and opportunities for further qualifications. Experience a vibrant work culture that values collaboration and innovation, making it an excellent place for ambitious professionals looking to make a difference in the construction industry.
