IT Security & Governance Manager, ISO 27001

Blacklistratings; Cheltenham; Hybrid; GBP 50,000 - 60,000; Full time

Job summary

A leading technology firm in Cheltenham is seeking an experienced IT Security & Governance Manager to oversee compliance and security certifications including ISO 27001. The role involves managing supplier engagements and contributing to risk management practices. The ideal candidate will have a foundational knowledge of data protection and compliance standards. This full-time position offers competitive salary and benefits including hybrid working options.

Qualifications

• Previous knowledge and responsibility for ISO 27001.
• Good knowledge of Cyber Essentials (NIST is an advantage).
• Data Protection or similar compliance qualification.
• Understanding of Risk Management methodologies.
• Experience of creating and managing an ISMS.
• Demonstrable knowledge of Policy production, management and promulgation.

Responsibilities

• Manage the compliance Portal / Information Security Management System.
• Manage supplier engagements based on IT Security Certifications.
• Manage the relevant Certifications primarily ISO 27001.
• Contribute to awareness activities.
• Support the management of Risk.
• Support daily maintenance activities and responses.
• Manage Policies, Awareness and Risk across the business.

Skills

ISO 27001 knowledge

Cyber Essentials knowledge

Data Protection compliance

Risk Management understanding

ISMS management experience

Policy management experience

Job description

IT Security & Governance Manager (ISO 27001)

Join to apply for the IT Security & Governance Manager (ISO 27001) role at Blacklist Ratings

Location: Cheltenham / Gloucester area. Salary c £50k‑£60k + benefits. 3 days per week in office, 2 days WFH.

Responsibilities

• Manage the compliance Portal / Information Security Management System.
• Manage supplier engagements based on IT Security Certifications and to drive improvements where required.
• Manage the relevant Certifications. Primarily ISO 27001, Cyber Essentials and NIST 800-171 (ISO 27001 critical, training available for NIST).
• Contribute to awareness activities.
• Supporting the management of Risk.
• Supporting the daily maintenance activities and response where necessary.
• Policies, Awareness and Risk across the business.

Qualifications

• Previous knowledge and responsibility for ISO 27001.
• Good knowledge of Cyber Essentials (NIST an advantage).
• Data Protection or similar compliance qualification.
• Understanding of Risk Management methodologies.
• Experience of creating and managing an ISMS.
• Demonstrable knowledge of Policy production, management and promulgation.

This is a great chance to join a global company that is going through an exciting period of growth and expansion. If you have the required skills and experience around ISO27001 please send your CV for a full brief. If you have the skills and experience and are interested in this position please send your CV for a full brief or call James Wallace on 07796 177494 for a confidential conversation.

Seniority level: Entry level

Employment type: Full-time

Job function: Information Technology

Industries: IT Services and IT Consulting