Security & Compliance Manager in Richmond

About Us

Inforcer is a leading provider of innovative solutions in the cybersecurity sector and dedicated to enhancing efficiency, improving security and driving success for our clients. We focus on providing MSPs with fundamental tools and technology they need to manage Microsoft Security policies for multiple tenants in a simple and effective way. Our mission is to be inforced in every MSP!

About the Role

We are seeking a Security & Compliance Manager to own and operationalise our information security, risk, and compliance framework as we scale through Series B toward Series C. You will ensure our security controls, policies, and certifications - including ISO 27001 and SOC 2 readiness - remain current, audit-ready, and embedded into day-to-day operations. This is a hands-on role with clear ownership, ideal for someone who enjoys building structure, bringing clarity, and acting as the connective tissue between Legal, IT, and the wider business.

What you'll be doing

• Technology Security: Ensure security is embedded in the design, implementation, and operation of internal IT systems.
• Technology Security: Partner with IT to ensure infrastructure is secure, scalable, cost-effective, and aligned with business strategy.
• Technology Security: Support automation, modern workplace adoption, and digital enablement initiatives with appropriate controls.
• Security and Compliance: Lead and maintain compliance across: ISO 27001, SOC 2 readiness and progression, GDPR and UK DPA 2018, other applicable regulatory and customer requirements.
• Security and Compliance: Own Inforcer's information security roadmap, risk register, and incident response framework.
• Security and Compliance: Coordinate all external audits, certifications, and assurance activities.
• Security and Compliance: Embed data governance and privacy-by-design principles across operational processes.
• Policy Ownership and Governance: Act as the single accountable owner for Inforcer's security, risk, and compliance policy framework.
• Policy Ownership and Governance: Own the annual review, update, approval, and version control cycle for all policies.
• Policies include (but are not limited to): Acceptable Use Policy, Business Continuity Plan, Data Protection Policy, Disaster Recovery Plan, Incident Response Plan, Risk Assessment Policy.
• Coordinate policy reviews with IT, Legal, Engineering, and Finance.
• Ensure policies are accessible, clearly communicated, and embedded in daily operations.
• Track and remediate gaps where policies are outdated or misaligned with certifications or organisational growth.
• Supplier Governance and Procurement: Ensure technology and SaaS suppliers meet contractual, security, and compliance standards.
• Supplier Governance and Procurement: Support due diligence and ongoing supplier risk assessments with Legal and Finance.
• Trust, Risk, and Assurance: Develop and maintain trust and compliance reporting, including dashboards for: Audit readiness, Policy status, Risk posture.
• Ensure reporting to SLT, ELT, and the Board is accurate, consistent, and defensible.
• Leadership and Culture: Champion a culture of security awareness, transparency, and continuous improvement.
• Leadership and Culture: Deliver training and awareness programmes across the business.

What We Can Offer You

• Competitive Compensation: Attractive salary, Pension contribution scheme through Nest, Competitive annual leave allowance.
• Work-Life Balance: Flexible working hours and hybrid/remote working options to support a healthy work-life balance.
• Regular Team Socials: We celebrate our team, our milestones, and our new businesses with social events every month.
• Investing in Your Future: We encourage a growth mindset through proactive development opportunities, such as continuous learning opportunities, professional training programs, and career advancement paths.
• Inclusive Environment: A supportive and inclusive workplace that values diversity and encourages collaboration and innovation.
• Employee Recognition: Programs to recognise and reward employees for their contributions and achievements.

Skills We Need for This Role

• Strong operational experience in information security and compliance within a SaaS or technology-led environment.
• Hands-on knowledge of ISO 27001, SOC 2, GDPR, and risk management practices.
• Experience coordinating audits and certifications end-to-end.
• Solid understanding of cloud infrastructure, ideally Microsoft 365 and Azure.
• Comfortable influencing senior stakeholders without formal authority.
• Highly organised and detail-oriented.
• A genuine commitment to trust, transparency, and accountability.

Don't quite have all of these skills? Why not apply and our team can review your experience and fit for the role. We'd love to hear from you!

Inforcer is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.