Information Security Manager

Job Summary

Owning and managing the information security program end-to-end, the full-time Information Security Manager will ensure compliance with GDPR and UK GDPR, drive certification efforts, and oversee data protection while working remotely or in a hybrid setting based in the UK or EU.

Key responsibilities

• Develop and maintain security policies, standards, and risk assessments, reporting on security posture to leadership
• Drive certification efforts for ISO 27001 and/or SOC 2, maintaining an audit-ready approach and managing data protection under GDPR
• Oversee incident response plans and security awareness training, ensuring the organization is prepared for security events

Required qualifications

• 5+ years of experience in information security and/or GRC within regulated industries
• Strong knowledge of GDPR and UK GDPR, along with hands-on experience with ISO 27001 and/or SOC 2
• Familiarity with the Microsoft security stack, including Entra ID and Microsoft Defender
• Experience responding to client security assessments and maintaining documentation for audits
• Relevant certifications such as CISSP, CISM, or equivalent experience