Find a job 
Featured Companies 
Featured Universities 
For Companies At a Glance
- Tasks: Lead and manage information security strategies, ensuring robust protection of data and systems.
- Company: Join Prevail Partners, a dynamic consultancy making a difference in security and intelligence.
- Benefits: Enjoy gym access, wellness discounts, private medical insurance, and professional development opportunities.
- Why this job: Be at the forefront of cybersecurity, shaping strategies that protect people and data globally.
- Qualifications: Experience with ISO 27001 and strong understanding of information security risk management required.
- Other info: Collaborative culture with opportunities for personal and professional growth.
The predicted salary is between 36000 - 60000 ÂŁ per year.
We are seeking an experienced and highly motivated Information Security Manager to join our growing team at Prevail Partners. The ideal candidate will bring deep technical knowledge of information security risks, controls and frameworks — with practical experience managing ISO 27001-compliant systems and embedding secure practices across dynamic operational environments. You will work closely with the Security Lead, Compliance Manager, IT department, and project teams to ensure robust, proportionate, and forward‑looking protection of our people, data and systems. This is a key role for a pragmatic and security‑minded individual who can operate at both strategic and operational levels, supporting the business as it expands its global footprint and develops sensitive technology solutions.
About Us
Prevail Partners delivers high quality intelligence, and security consultancy services to clients ranging from governments and multinational corporations to non‑governmental organisations. These services are delivered predominantly across Europe, the Middle East and Africa. We pride ourselves on selecting interesting projects which we believe can genuinely make a difference. You will be joining the company at a time of continued growth, and be required to support a wide variety of these projects across the whole company.
Key Responsibilities
- Security Strategy & Governance
- Lead the continued development of Prevail's Information Security Management System (ISMS) in alignment with ISO 27001, driving forward maturity and integration with wider business goals.
- Serve as the lead advisor on information security, ensuring risk‑based decision‑making and strong stakeholder engagement across the business.
- Maintain close working relationships with external stakeholders including NCSC and NPSA, ensuring Prevail remains alert to national‑level threat reporting and guidance.
- Represent information security within executive‑level planning, commercial proposals, and assurance processes.
- Operational Security & Risk Management
- Oversee the planning, implementation and management of technical and procedural controls across endpoint security, data access, and cloud infrastructure (including AWS).
- Maintain Prevail's Cyber Essentials and Cyber Essentials Plus accreditations, including preparation, audit liaison, and continuous improvement of control measures.
- Lead structured risk assessments across internal systems and project‑specific activities, and develop pragmatic mitigation plans with relevant teams.
- Data Protection & Compliance
- Work alongside the Compliance Manager and DPO to ensure effective implementation of UK data protection law, including support for Data Protection Impact Assessments (DPIAs) and data mapping.
- Oversee the information security training and awareness programme, ensuring it reflects both regulatory obligations and operational realities.
- Maintain up‑to‑date security documentation, incident logs, audit records and policy registers.
- Preparedness & Incident Response
- Lead and continuously improve the company's incident response framework, including conducting tabletop exercises and reviewing lessons learned.
- Ensure the business is prepared to respond to cyber security incidents, breaches or service disruptions through robust business impact assessment, business continuity and recovery planning.
- Internal Engagement & Security Culture
- Deliver internal briefings and staff awareness sessions across the year, including at onboarding and company townhalls.
- Champion a culture of secure behaviours, ensuring all staff understand their role in protecting the organisation and its data.
- Collaborate with teams across operations, HR and IT to identify emerging vulnerabilities and strengthen preventative measures.
- Governance & Oversight
- Chair or co‑chair internal security governance forums to track risks, define priorities, and drive improvement across physical, cyber and personnel domains.
- Contribute to security input for new markets, overseas deployments, and sensitive project work.
- Support leadership in meeting regulatory, contractual, and reputational requirements in relation to information security.
Requirements
Essential
- Demonstrable experience leading or managing an ISO 27001‑aligned ISMS and Cyber Essentials with a track record of successful implementation or certification.
- Strong understanding of information security risk management, governance, and technical controls.
- Knowledge of UK data protection regulations (GDPR) and security standards relevant to operational delivery.
- Excellent communication and stakeholder management skills, including the ability to engage non‑technical audiences.
- A proactive, solutions‑focused mindset, capable of balancing security with business agility.
Desirable
- ISO 27001 Lead Implementer or Lead Auditor certification.
- Experience working in or with secure government, defence, or national security environments.
- Familiarity with broader frameworks such as ISO 31000, NIST CSF or CIS Controls.
- Experience supporting the secure delivery of software or technology platforms.
- Familiarity with JSP 440, Secure by design and other cyber resilience frameworks.
Benefits
- Gym Access & Wellness Discounts: Access to discounted memberships and gym facilities for London‑based employees.
- Cycle to Work Scheme: Tax‑efficient savings on bikes and accessories, available post‑probation.
- Season Ticket Loans: Interest‑free loans for annual commuting costs.
- Private Medical Insurance: Fully funded cover through Vitality Health after two years' service.
- Employee Assistance Programme: Confidential mental health, legal, financial and wellbeing support via Health Hero.
- Enhanced Leave Entitlements: Supporting you through important life moments with flexibility.
- Professional Development Days: Dedicated time off to focus on your personal and professional growth through training, courses, or self‑directed learning.
- Culture & Development: A values‑led culture with regular social events, collaborative initiatives, and meaningful opportunities for personal and professional development.
Information Security Manager in London employer: Prevail Partners Limited
Contact Detail:
Prevail Partners Limited Recruiting Team
StudySmarter Expert Advice 🤫
We think this is how you could land Information Security Manager in London
✨Tip Number 1
Network like a pro! Reach out to your connections in the industry, attend relevant events, and engage with professionals on platforms like LinkedIn. We can’t stress enough how important it is to make those personal connections that could lead to job opportunities.
✨Tip Number 2
Prepare for interviews by researching the company and its culture. Understand their security practices and be ready to discuss how your experience aligns with their needs. We want you to shine, so practice common interview questions and have your own questions ready!
✨Tip Number 3
Showcase your skills through practical demonstrations. If you’ve got experience with ISO 27001 or Cyber Essentials, consider sharing case studies or examples of your work during interviews. We love seeing candidates who can back up their claims with real-world experience.
✨Tip Number 4
Don’t forget to apply through our website! It’s the best way to ensure your application gets seen by the right people. Plus, we’re always looking for passionate individuals who are eager to make a difference in the field of information security.
We think you need these skills to ace Information Security Manager in London
Some tips for your application 🫡
Tailor Your CV: Make sure your CV is tailored to the Information Security Manager role. Highlight your experience with ISO 27001 and any relevant certifications. We want to see how your skills align with our needs!
Craft a Compelling Cover Letter: Your cover letter is your chance to shine! Use it to explain why you're passionate about information security and how you can contribute to our team. Keep it concise but impactful, and don’t forget to mention your understanding of UK data protection regulations.
Showcase Your Communication Skills: Since you'll be engaging with both technical and non-technical audiences, make sure to demonstrate your communication skills in your application. Use clear language and avoid jargon where possible, so we can see how well you can convey complex ideas.
Apply Through Our Website: We encourage you to apply through our website for a smoother process. It helps us keep track of applications and ensures you get all the updates directly from us. Plus, it shows you're keen on joining our team!
How to prepare for a job interview at Prevail Partners Limited
✨Know Your ISO 27001 Inside Out
Make sure you brush up on your knowledge of ISO 27001 and how it applies to information security management systems. Be ready to discuss your practical experience with implementing or managing these systems, as well as any challenges you've faced and how you overcame them.
✨Showcase Your Risk Management Skills
Prepare to talk about your approach to risk management. Think of specific examples where you've conducted risk assessments or developed mitigation plans. Highlight your ability to balance security needs with business agility, as this is crucial for the role.
✨Engage with Stakeholders
Demonstrate your communication skills by discussing how you've engaged with various stakeholders in previous roles. Be ready to share examples of how you've simplified complex security concepts for non-technical audiences, as effective communication is key in this position.
✨Emphasise a Security Culture
Be prepared to discuss how you've fostered a culture of security awareness within your teams. Share your experiences in delivering training sessions or workshops, and explain how you’ve encouraged secure behaviours among staff to protect the organisation's data.
