The Role: This role is hands on, focused on achieving the following:
- Complete Stage 1, the framework for which is already just about ready
- Own the Stage 2 readiness plan: gap registers, owners, dates and weekly status
- Close gaps directly where they are documentation or configuration, and through control owners where they are operational
- Make the ISMS understood and owned across IT, Security, Compliance, HR, Finance, Projects and Exports
- Simplify and embed processes so evidence is see in day to day operations, not just on a checklist for the audit
- Hand over a system the permanent team can sustain through surveillance audits
The Ideal Candidate: We’re looking for the following in the successful candidate:
- Solid, progressive experience ISO 27001:2022
- ISO27001 Lead Implementer or Lead Auditor qualification
- Track record of getting non IT departments to own controls, with the credibility and patience to make it stick
- Hands on with a compliance platform (eg Drata, Vanta, Secureframe or similar)
- Enough Microsoft 265 and Entra ID surface understanding to have sensible conversations with the IT team
- Strong written English to delivery good quality
- If you have CISM, CISSP or CISA then great, but not essential
Additional Information
Salary is dependent upon experience. This is working for a fantastic company who really value their staff.