Senior Conformity Assessment Program Specialist - Information Security Management System in Basingstoke

The Senior ISO/IEC 27001 + TISAX Compliance Specialist is responsible for developing, implementing, and maintaining the organization’s Information Security Management Systems (ISMS) global conformance/compliance requirements to ensure alignment with ISO/IEC 27001 and TISAX requirements across multiple business/customer operating units. This role ensures conformance/compliance with the requirements, supports the management of information security risks, and supports the culture of information and cybersecurity awareness across the organization where ISO/IEC 27001 /TISAX conformance/compliance is required.

Qualifications:

• Bachelor’s or Master’s degree in Information Security, Computer Science, Cybersecurity, Risk Management, or a related field.
• Minimum 5 years of experience in information security, IT compliance, or risk management roles, preferably within a TIC (Testing, Inspection, Certification) organization.
• Proven experience in implementing and maintaining ISO/IEC 27001 and TISAX-conformant/compliant ISMS.
• Preferred certifications: ISO/IEC 27001 or TISAX Lead Implementer.
• Strong understanding of and experience with risk management methodologies, processes, and tools (e.g., risk registers, threat modeling).
• Demonstrated experience supporting ISO/IEC 27001/TISAX implementations, including contributing to the resolution of corrective actions and supporting continuous improvement initiatives led by ISMS Managers.
• Excellent analytical, organizational, and project management skills.
• Strong interpersonal, networking and communication skills, with the ability to influence internal and external stakeholders at all levels.
• Fluency in English required.

What we offer:

• Total Rewards: Salary range varies by location and local market conditions and is based on multiple factors, including job-related knowledge/skills, experience, geographical location, and other factors.
• This position is eligible for additional incentive with a target payout of 10% of base salary.
• You’ll also enjoy annual paid leave, access to our ULS University to support continuous learning and career growth, two volunteering days each year to participate in community activities, and flexible working arrangements designed to help you balance work and life.

Responsibilities:

• Develop and maintain global ISO/IEC 27001 and TISAX conformance/compliance requirements documentation in support of local UL Solutions Statements of Applicability (SoAs), information security policies, procedures, processes, and controls.
• Collaborate with ISMS Managers to ensure local conformance/compliance with ISO/IEC 27001 and TISAX requirements, including legal, regulatory, and contractual obligations.
• Partner with Global Technology, Global Cybersecurity, and other key functional teams (e.g., Legal, Business Continuity) to advise on applicable ISMS control requirements and potential solutions to address ISO/IEC 27001 and TISAX conformance/compliance issues.
• Support locations in conducting information security risk assessments and treatment, providing advice and guidance to ensure a consistent and aligned approach across the organization.
• Support the development of global processes that enable conformance/compliance with ISO/IEC 27001 and TISAX requirements.
• Support continuous improvement initiatives led by ISMS Managers.
• Assist in resolving corrective actions managed by ISMS Managers, leveraging prior experience in managing corrective actions to provide effective support.
• Stay current with changes in ISO/IEC 27001, TISAX, and other relevant best practice standards and regulatory frameworks.