At a Glance
- Tasks: Lead information security and data privacy initiatives in a dynamic WealthTech environment.
- Company: High-growth WealthTech platform with a focus on innovation and compliance.
- Benefits: Hybrid working, competitive salary, and a clear pathway to a permanent role.
- Other info: Immediate start with excellent career growth opportunities.
- Why this job: Make a real impact on data security and privacy in a fast-paced industry.
- Qualifications: Experience in information security within financial services or regulated tech environments.
The predicted salary is between 60000 - 80000 £ per year.
We are supporting a high-growth WealthTech platform in hiring an Information Security & Data Privacy Manager on an initial 6-month contract, with a clear pathway to a permanent role. This is an interim hire due to confidentiality, sitting directly with the COO, responsible for owning the organisation’s information security, data privacy and compliance framework across both on-premise and SaaS environments.
The role requires an individual who has operated in similar financial services or regulated technology environments, with hands-on ownership of ISO, SOC2, and audit processes.
Key Responsibilities- Own and maintain the Information Security Management System (ISMS), ensuring ongoing compliance and maturity.
- Lead ISO 27001 and SOC2 certification processes, including audits, renewals, and continuous improvement.
- Define and implement information security policies, governance frameworks, and controls across the business.
- Act as the primary point of contact for all security, compliance, and audit-related activities.
- Partner with engineering, infrastructure, and operations teams to ensure security is embedded across both on-prem and SaaS platforms.
- Manage third-party security providers and ensure alignment with internal standards.
- Establish and maintain incident response, risk management, and business continuity frameworks.
- Drive data privacy initiatives, ensuring compliance with GDPR and relevant regulatory requirements.
- Build reporting frameworks and dashboards for leadership visibility on risk, compliance, and security posture.
- Engage with senior stakeholders to influence security strategy and decision-making.
- Proven experience in an Information Security/Data Privacy Manager role within financial services, FinTech, or regulated SaaS environments.
- Hands-on experience maintaining ISO 27001 and SOC2 certifications, including audit ownership.
- Strong understanding of ISMS frameworks, risk management, and security governance.
- Experience working across both on-premise and SaaS software environments.
- Practical experience implementing security controls alongside engineering and infrastructure teams.
- Strong knowledge of data privacy regulations (e.g., GDPR) and their application within technology platforms.
- Experience managing third-party security vendors or SOC providers.
- Ability to operate in a hands-on capacity, not purely advisory or oversight.
- Strong stakeholder management, with experience working closely with senior leadership.
- Initial 6-month contract (outside IR35) with a clear route to permanent.
- Role is confidential at this stage; full company details shared upon interview request.
- Hybrid working: London office, 2–3 days per week.
- Immediate start.
Information Security & Data Privacy Manager employer: Wiseman Family Office
Contact Detail:
Wiseman Family Office Recruiting Team
StudySmarter Expert Advice 🤫
We think this is how you could land Information Security & Data Privacy Manager
✨Tip Number 1
Network like a pro! Reach out to your connections in the financial services or tech space. Let them know you're on the lookout for opportunities, and who knows? They might just have the inside scoop on openings that aren't even advertised yet.
✨Tip Number 2
Prepare for those interviews! Research the company and its security practices. Be ready to discuss how your experience with ISO 27001 and SOC2 can help them maintain compliance and improve their security posture. Show them you mean business!
✨Tip Number 3
Don’t forget to showcase your hands-on experience! When chatting with potential employers, highlight specific projects where you’ve implemented security controls or managed third-party vendors. This will set you apart from the crowd.
✨Tip Number 4
Apply through our website! We’re all about making the job search easier for you. Plus, it gives us a chance to see your application directly and connect with you faster. So, what are you waiting for? Get applying!
We think you need these skills to ace Information Security & Data Privacy Manager
Some tips for your application 🫡
Tailor Your CV: Make sure your CV speaks directly to the role of Information Security & Data Privacy Manager. Highlight your experience with ISO 27001, SOC2, and any relevant compliance frameworks. We want to see how your background fits perfectly with what we're looking for!
Craft a Compelling Cover Letter: Your cover letter is your chance to shine! Use it to explain why you're passionate about information security and data privacy. Share specific examples of how you've led similar initiatives in the past, especially in financial services or regulated environments.
Showcase Your Hands-On Experience: We’re looking for someone who can roll up their sleeves and get involved. Make sure to detail your hands-on experience with security controls and audits. Let us know how you've partnered with engineering and operations teams to embed security into processes.
Apply Through Our Website: Don’t forget to apply through our website! It’s the best way for us to receive your application and keep track of all candidates. Plus, it shows you’re serious about joining our team at StudySmarter!
How to prepare for a job interview at Wiseman Family Office
✨Know Your Stuff
Make sure you brush up on your knowledge of ISO 27001 and SOC2 certifications. Be ready to discuss your hands-on experience with these frameworks, as well as any audits you've led. This will show that you’re not just familiar with the concepts but have actively engaged with them.
✨Showcase Your Compliance Skills
Prepare examples of how you've implemented information security policies and governance frameworks in previous roles. Highlight specific instances where you ensured compliance with GDPR or other regulations, as this is crucial for the role.
✨Engage with Stakeholders
Think about how you've influenced security strategy in past positions. Be ready to share stories about your interactions with senior leadership and how you’ve managed to align security initiatives with business goals. This will demonstrate your ability to communicate effectively at all levels.
✨Be Hands-On
This role requires a hands-on approach, so be prepared to discuss your practical experience working alongside engineering and infrastructure teams. Share specific examples of how you’ve embedded security controls in both on-premise and SaaS environments to show you can hit the ground running.