Information Security Officer (ISO27001 & Cyber Essentials)

About the role

We are looking for an experienced Information Security Officer to lead and enhance our clients' security posture. You will manage the Information Security Management System, maintain ISO27001 and Cyber Essentials Plus certifications, and act as the company‑wide champion for information security.

Key responsibilities

• Manage and maintain the ISMS aligned to ISO27001.
• Oversee external certification processes and audit programmes.
• Deliver internal information security audits and governance forums.
• Define and evolve the organisation’s security strategy.
• Provide security architecture expertise for system development and change initiatives.
• Advise operational teams on security control implementation and improvement.
• Develop and deliver company‑wide security training and awareness.
• Serve as Primary Incident Response Manager for security incidents.
• Manage and review information security risks across the organisation.
• Lead security improvement initiatives and oversee supply‑chain risk and vendor assessments.

Required profile

• Minimum 5 years’ experience in an information security role.
• Degree‑level education preferred but not essential.
• CISSP (or equivalent) required; C|CISO certification desirable.
• Proven ability to communicate with and influence senior stakeholders.

Required skills

• ISO27001 controls and certification management.
• Cyber Essentials Plus certification experience.
• Security architecture knowledge.
• Cyber incident response expertise.
• Risk management and audit process management.
• Vendor and supply‑chain risk assessment.
• CISSP certification.
• C|CISO certification (desirable).