Find a job 
Featured Companies 
Featured Universities 
For Companies At a Glance
- Tasks: Lead the charge in managing Information Security risks and policies at AJ Bell.
- Company: Join AJ Bell, a fast-growing investment platform and a top-rated workplace.
- Benefits: Enjoy 27+ days holiday, pension schemes, bonuses, and health plans.
- Why this job: Make a real impact on security while working with cutting-edge technology.
- Qualifications: 5+ years in Information Security, preferably in financial services.
- Other info: Hybrid work model with a focus on teamwork and personal development.
The predicted salary is between 36000 - 60000 £ per year.
We are now recruiting an Information Security GRC Manager to support the Senior Manager and Chief Information Security Officer in managing and reporting the Information Security Risks faced by Technology Services and Business teams in delivering AJ Bell's systems and services. The Information Security GRC Manager will work with the business and the wider information security team to ensure the appropriate controls, policies and procedures are in place to protect AJ Bell in line with industry best practice and regulatory legislation.
In addition, this role will support the coordination and response to activities affiliated with external/internal IT audits as well as due diligence exercises requested by our external business partners and those we perform on our suppliers.
The key responsibilities of the role are:
- Development and delivery of information security policy aligned to industry recognised frameworks (typically ISO).
- Exception to policy process management and reporting.
- Management reporting on the status of Information Security and the security change programme.
- Partner with Business and Technology teams, to develop and track remediation plans for identified risks and issues.
- Supporting and developing the evaluation of the security posture for key Third Parties, to ensure that they are in line with the desired security posture required by AJ Bell.
- Undertaking risk profiling of AJ Bell's information and technology assets.
- Ensure that all duties are carried out with the aim of protecting customers and improving customer experience.
- Supporting and enabling the business to achieve its regulatory requirements, including consumer duty.
Technical skills
- Strong understanding and knowledge of Information Security risk management tools and techniques.
- Experience of Information Security standards and frameworks.
- Awareness and understanding of the Information Security threat landscape.
- Awareness of Information Security solutions e.g. email/web gateways, SIEM, Endpoint protection etc.
- Strong understanding of IT General Controls frameworks.
- Awareness of Operational Risk Management and Risk & Control Self-Assessment (RCSA) processes.
Competence, knowledge and skills
- Experience working within recognised Information Security frameworks and best practices such as ISO, NIST etc.
- Minimum 5 years' experience in an Information Security role gained in a financial services environment is preferred.
- Self-motivated, professional, tenacious and enthusiastic.
- Strong ownership of tasks, attention to detail and following through to conclusion.
- Ability to challenge approach, strategy and implementation to ensure Information Security is consistently considered and improved.
- Ability to work under own initiative to plan and communicate effectively with colleagues and customers.
- Structured, self-starting, flexible and enjoy working in fast-paced environments.
- Effective communication skills, both written and verbal.
- Ability to plan, organise and follow through on assigned tasks and complete with little or no prompting from management.
- Ability to learn and develop new skills and take on new challenges.
- Excellent attention to detail.
- Attained or working towards CISM certification.
About Us
AJ Bell is one of the fastest-growing investment platform businesses in the UK offering an award-winning range of solutions that caters for everyone, from professional financial advisers to DIY investors with little to no experience. We have over 644,000 customers using our award-winning platform propositions to manage assets totalling more than £ billion. Our customers trust us with their investments, and by continuously striving to make investing easier, we aim to help even more people take control of their financial futures.
Having listed on the Main Market of the London Stock Exchange in December, AJ Bell is now a FTSE 250 company. Headquartered in Manchester with offices in central London and Bristol, we now have over 1,500 employees and have been named one of the UK's 'Best 100 Companies to Work For' for six consecutive years and in named a Great Place to Work.
At AJ Bell you can expect a friendly working environment with a strong sense of teamwork, we have a great sense of pride in what we do, and this is reflected in our guiding principles.
What we offer:
- Starting holiday entitlement of 27, increasing up to 31 days with length of service and a holiday buy and sell scheme.
- A choice of pension schemes with matched contributions up to 8%.
- Discretionary bonus scheme.
- Annual free share awards scheme.
- Buy As You Earn (BAYE) Scheme.
- Health Cash Plan – provided by Simply Health.
- Discounted private healthcare scheme and dental plan.
- Free gym.
- Employee Assistance Programme.
- Sick pay+ pledge.
- Enhanced maternity, paternity, and shared parental leave.
- Loans for travel season tickets.
- Charitable giving opportunities through salary sacrifice.
- Calendar of social events, including monthly payday drinks, annual Christmas party, summer party and much more.
- Personal development programmes built around you and your career goals, including access to personal skills workshops.
- Monthly leadership breakfasts and lunches.
- Casual dress code.
- Access to a range of benefits from our sponsorship deals.
At AJ Bell, our people are the heart of our culture. We believe in building strong connections by working together. That's why we offer a hybrid working model, where you'll spend 3-4 days per week in the office. For new team members, the first 3 months will be spent full-time in the office to help you immerse yourself in our business and build valuable relationships with your colleagues.
AJ Bell is committed to providing an environment of mutual respect where equal employment opportunities are available to all applicants and all employees are empowered to bring their whole self to work. We do not discriminate on the basis of race, sex, gender identity, sexual orientation, age, pregnancy, religion, physical and mental disability, marital status and any other characteristics protected by the Equality Act. All decisions to hire are based on qualifications, merit and business need.
If you like the sound of the above, or just want to know more about the company and the role, we'd love to speak to you.
Information Security Grc Manager in Stretford employer: Manchester Digital
Contact Detail:
Manchester Digital Recruiting Team
StudySmarter Expert Advice 🤫
We think this is how you could land Information Security Grc Manager in Stretford
✨Tip Number 1
Network like a pro! Reach out to your connections in the industry, especially those who work at AJ Bell or similar companies. A friendly chat can sometimes lead to insider info about job openings or even a referral.
✨Tip Number 2
Prepare for interviews by researching AJ Bell's values and recent projects. Tailor your answers to show how your experience aligns with their mission. We want to see that you’re genuinely interested in what we do!
✨Tip Number 3
Practice makes perfect! Conduct mock interviews with friends or use online platforms. The more comfortable you are discussing your skills and experiences, the better you'll perform when it counts.
✨Tip Number 4
Don’t forget to follow up after your interview! A quick thank-you email can leave a lasting impression and shows your enthusiasm for the role. Plus, it keeps you on their radar as they make their decision.
We think you need these skills to ace Information Security Grc Manager in Stretford
Some tips for your application 🫡
Tailor Your Application: Make sure to customise your CV and cover letter to highlight your experience in Information Security and GRC. Use keywords from the job description to show that you understand what we're looking for.
Showcase Your Skills: Don’t just list your skills; provide examples of how you've applied them in previous roles. Whether it's managing risks or developing security policies, we want to see how you’ve made an impact.
Be Clear and Concise: Keep your application straightforward and to the point. We appreciate clarity, so avoid jargon and ensure your writing is easy to read. This will help us see your communication skills right away.
Apply Through Our Website: We encourage you to submit your application through our website. It’s the best way for us to receive your details and ensures you’re considered for the role. Plus, it’s super easy!
How to prepare for a job interview at Manchester Digital
✨Know Your Frameworks
Make sure you brush up on the key information security frameworks like ISO and NIST. Be ready to discuss how you've applied these in your previous roles, especially in a financial services context. This shows you understand the industry's best practices and can bring that knowledge to AJ Bell.
✨Showcase Your Risk Management Skills
Prepare specific examples of how you've managed information security risks in past positions. Highlight your experience with risk profiling and remediation plans, as this role heavily focuses on identifying and addressing risks. Use metrics or outcomes to demonstrate your impact.
✨Communicate Effectively
Since this role involves partnering with various teams, practice articulating complex security concepts in simple terms. Think about how you can explain technical details to non-technical stakeholders. Good communication skills will set you apart and show you're a team player.
✨Be Ready for Scenario Questions
Expect scenario-based questions that test your problem-solving abilities in real-world situations. Prepare by thinking through potential security incidents and how you would handle them. This will demonstrate your critical thinking and ability to act under pressure, which is crucial for the role.