Information Security Manager (GRC-Focused) We’re partnered exclusively with one of our London-based financial services clients in their search for an Information Security Manager to take ownership of their security governance and help mature the organisation’s security posture. This is a governance-first role. You’ll lead policies, frameworks, risk management and compliance, while working closely with engineering and architecture teams on cloud and API security. You won’t be hands‑on‑keyboard day to day, but you will be the authority shaping how security works across their business. They’re looking for someone familiar with working in a start‑up environment where they are used to taking end‑to‑end ownership of the full security function in the business.
What you’ll be doing
- Owning and evolving the information security policy and risk framework
- Leading certifications and assurance (ISO 27001, SOC 2, Cyber Essentials+, GDPR, FCA/DORA as relevant)
- Maintaining the risk register and reporting to senior leadership
- Providing cloud security governance across AWS, Azure or GCP
- Driving security awareness and acting as a key stakeholder during incidents
What we’re looking for
- Strong GRC background with real-world delivery experience
- Deep knowledge of ISO 27001, NIST CSF or similar frameworks
- Solid understanding of cloud security concepts
- Confidence engaging senior stakeholders and translating risk into business language
Nice-to-haves include security certifications and exposure to AI/LLM security risks. If this looks like an interesting role and potentially the next step in your career, send across your CV or contact Adam Whitehurst at Trust in Soda for more info.
Information Security Manager employer: Trust In SODA
Trust In SODA is an exceptional employer, offering a dynamic work culture that fosters innovation and collaboration within one of Europe's largest Kubernetes projects. Employees benefit from extensive growth opportunities, including AWS and CKA certification, while enjoying the flexibility of a hybrid working environment that promotes work-life balance and personal development.
