Key Responsibilities

• Lead the end-to-end implementation of ISO 27001, taking the organisation from initial assessment through to successful accreditation.
• Develop, implement and maintain an Information Security Management System (ISMS), ensuring alignment with ISO 27001 requirements and business objectives.
• Own and drive the organisation's governance, risk and compliance (GRC) activities, identifying and managing information security and data protection risks.
• Ensure compliance with GDPR, UK data protection legislation and relevant regulatory requirements.
• Develop and maintain information security policies, procedures, risk registers, control frameworks and supporting documentation.
• Conduct gap analyses, risk assessments and internal audits, coordinating remediation activities to address identified weaknesses.
• Prepare the organisation for external audits and certification assessments, working closely with auditors and key stakeholders.

Key Responsibilities

• Lead the end-to-end implementation of ISO 27001, taking the organisation from initial assessment through to successful accreditation.
• Develop, implement and maintain an Information Security Management System (ISMS), ensuring alignment with ISO 27001 requirements and business objectives.
• Own and drive the organisation's governance, risk and compliance (GRC) activities, identifying and managing information security and data protection risks.
• Ensure compliance with GDPR, UK data protection legislation and relevant regulatory requirements.
• Develop and maintain information security policies, procedures, risk registers, control frameworks and supporting documentation.
• Conduct gap analyses, risk assessments and internal audits, coordinating remediation activities to address identified weaknesses.
• Prepare the organisation for external audits and certification assessments, working closely with auditors and key stakeholders.