Policy and Compliance Specialist

Overview We are looking for an experienced IT Security & ISO Compliance Specialist to lead the management and upkeep of our Information Security Management System (ISMS) aligned with ISO 27001 standards. This role is pivotal to ensuring the organisation maintains robust compliance frameworks, manages documentation effectively, and prepares for audits and certifications. The ideal candidate will have a strong background in ISO 27001, and ideally experience with additional standards such as ISO , and CSR practices. This position may also support broader IT operations, including system testing, asset management, and security incident response. Key Responsibilities Manage and maintain compliance with ISO standards across the business, with a primary focus on ISO 27001. Develop and update documentation and policies to meet compliance requirements. Collaborate with various departments to embed ISO practices effectively across business functions. Prepare reports and updates for senior stakeholders on compliance and certification status. Monitor regulatory updates and ISO standard changes, ensuring continued compliance. Promote a culture of continuous improvement and best practice in quality and information security. Support compliance with Data Protection regulations and PCI DSS requirements. Assess third-party vendors for compliance with organisational security and quality expectations. Provide support for general IT operations, including testing, investigations, and asset management when needed. Required Experience & Skills Minimum 2 years of direct experience with ISO 27001 implementation, auditing, and certification processes. Strong understanding of risk assessment, documentation control, and corrective action procedures. Proficient in Microsoft Office and relevant ISO/compliance tools. Skills: ISO Frameworks Security Compliance