Security & Compliance Lead (ISMS/ISO27001) – Remote

Abyssal S.A; Aberdeen City; Hybrid; GBP 80,000 - 100,000; Full time

Job summary

A leading offshore wind company in Aberdeen is seeking an Information Security Manager to ensure robust security frameworks that comply with regulations. This role involves managing ISMS, conducting audits, and driving security initiatives. The ideal candidate will possess extensive experience in information security, relevant certifications, and a collaborative attitude towards innovation. Competitive salary and opportunities for growth offered.

Benefits

Flexible working hours

Work from home opportunities

Career growth and professional development

Qualifications

• Professional certifications such as CISSP are essential.
• In-depth understanding of ISO/IEC 27001 and NIST frameworks required.
• Strong grasp of risk management principles and practices necessary.
• Proficiency in security technologies, particularly the Microsoft suite, is essential.
• Familiarity with GDPR data privacy laws needed.
• Experience in incident response and business continuity planning necessary.
• Ability to conduct security audits is critical.
• 5+ years of experience in information security is mandatory.
• Proven success in developing and implementing security policies required.

Responsibilities

• Evaluate and enforce information security policies aligning with regulations.
• Manage and improve the information security management system (ISMS).
• Integrate security controls into business operations and digital solutions.
• Support incident response planning and investigations.
• Conduct regular risk assessments and audits for vulnerabilities.
• Monitor emerging threats and update policies accordingly.
• Maintain information security documentation for audits.
• Lead compliance initiatives for legal and regulatory obligations.
• Promote security awareness and training across the organization.
• Report security incidents and audit results to leadership.

Skills

CISSP certification

In-depth understanding of information security frameworks

Strong grasp of risk management principles

Proficiency in security technologies

Familiarity with data privacy laws

Experience with incident response and disaster recovery

Conducting security audits and vulnerability assessments

Minimum 5 years of experience in information security

Track record of developing security policies

Job description

A leading offshore wind company in Aberdeen is seeking an Information Security Manager to ensure robust security frameworks that comply with regulations. This role involves managing ISMS, conducting audits, and driving security initiatives. The ideal candidate will possess extensive experience in information security, relevant certifications, and a collaborative attitude towards innovation. Competitive salary and opportunities for growth offered.