IT Compliance and Audit Manager at Galliford Try

Hinckley, England, United Kingdom -

Full Time

Start Date

Immediate

Expiry Date

24 Sep, 26

Salary

0.0

Posted On

26 Jun, 26

Experience

2 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

ISO 27001, Information Security Management, Risk Assessment, Internal Auditing, ISMS Implementation, Compliance Monitoring, Security Policy Development, Incident Response, Stakeholder Management, Security Training

Industry

Construction

Description

Note for Recruitment Agencies: We prefer to hire directly and we will be in touch with our PSL Agencies if this role is eligible for release. We do not accept speculative CVs from agencies. If speculative CVs are sent, no fee will be applicable – please direct all queries to the relevant Resourcing Partner. Title: IT Compliance and Audit Manager Location: Hinckley An opportunity has arisen for an IT Compliance and Audit Manager to join the team at Galliford Try within our Group Services business unit. The IT Compliance and Audit Manager is responsible for overseeing the entire Information Security Management Systems (ISMS) implementation within Galliford Try in accordance with ISO 27001 standards. What you will be doing: * Oversee the development, implementation, and maintenance of the organisation's ISMS in accordance with ISO 27001 standards. * Complete the quarterly audits and prepare information for Top Level Management Review to ensure the ISMS maintains suitability, adequacy and effectiveness * Conduct regular risk assessments to identify potential security threats and vulnerabilities and develop mitigation strategies. * Create and update information security policies, procedures, and guidelines to ensure compliance with ISO 27001 requirements. * Plan and conduct internal audits to assess the effectiveness of the ISMS and identify areas for improvement, OFIs and NCs (Opportunity for Improvement and Non-Compliance). * Prepare detailed audit reports, summarising findings, recommendations, and corrective actions. * Monitor and ensure ongoing compliance with ISO 27001 standards and other relevant regulations and requirements. * Develop and deliver information security training and awareness programs for employees at all levels of the organisation. * Collaborate with internal and external stakeholders, including senior management, IT teams, and external auditors, to ensure alignment and support for information security initiatives. * Take part in incident response activities, including investigation, documentation, and reporting of security incidents. About you: * ISO 27001 Lead Auditor or Lead Implementer certification * Minimum 3 years’ experience in information security management, with a strong focus on ISO 27001 * In‑depth knowledge of information security principles, risk management and compliance * Strong written and verbal communication skills, with the ability to engage non‑technical stakeholders * Ability to take ownership, lead activities and manage multiple priorities What We Can Offer in Return: With an impressive order book of over £4.1 billion we are one of the industry’s leading principal contractors, affording you the opportunity to work on some of the UK’s most exciting projects offering you stability as well as the chance to stretch your capabilities and realise long held career goals. You will be joining diverse teams working at a high professional level with exceptional levels of commitment. With an ambitious strategy, we’re poised for further growth and success, so if you’re committed, talented and enthusiastic, Galliford Try is the right place for you. We are committed to maintaining the physical and mental wellbeing of all our people, through our ‘Be Well’ programme which offers discounts on certain products, advice and support for a range of issues. We invest in high-quality training for employees of all levels, from our leadership development framework to our apprenticeship programmes. Through our Career Paths initiative, individuals receive tailored training and support to fulfil their potential. Our industry is all about creating talented teams that excel in their areas of expertise. As an employer, we know you are most motivated to give your best when you feel valued and engaged. Our Agile Working programme empowers you with flexibility in when, where and how you work. Where appropriate, site and office-based employees can take advantage of a wide variety of working practices, offering different amounts of structure, regularity and flexibility to suit your needs as well as those of your wider team. Our benefits: We put our people first and our benefits package reflects that by offering a comprehensive range of attractive options to help support your career on top of a competitive salary. * Generous holiday entitlement, increasing with years of service, plus the opportunity to purchase further holidays * A wide range of corporate discounts * Cycle to Work schemes * Comprehensive pension plan * Competitive family leave policy * Regular Save as You Earn share purchase scheme * Private medical scheme options are available for all salaried employees, and our employee assistance programme also provides free 24/7 support to those who need it * Paid for yearly membership to one recognised professional association relevant to your role About us: Our purpose is to improve people’s lives through building the facilities and infrastructure that communities need, providing opportunities for our people to learn, grow and progress, working with our supply chain to promote the very best working practice and caring for the environment in which we work. We do this by holding true to our values, delivering excellence for our clients and the community, being passionate about our role in providing vital services, putting integrity at the heart of our business by doing the right thing, and collaborating with our clients, supply chain and stakeholders to deliver lasting change and long-term value. For more information on this role or to enquire about other positions available within our business please contact Skyemarie Bree – skyemarie.bree@gallifordtry.co.uk Galliford Try is a leading UK Construction group. The business is split into four distinct divisions, Infrastructure, Building, Environment and Specialist Services, covering a range of specialist work in water, highways, telecoms, security, commercial, custodial, education, health, interiors, and leisure, across both public and private sectors. Listed on the London Stock Exchange and a member of the FTSE 250. Our vision is to be leaders in the construction of a sustainable future. Additional Information: Galliford Try welcomes applications from candidates who would like to work full-time, reduced hours or flexibly and this will be discussed in more detail as part of the recruitment process. We encourage, and would be grateful if, you could confirm any requirements we can reasonably fulfil to make this application a positive experience for you. Don’t meet every requirement of the role? Studies have shown that some people are less likely to apply for jobs unless they meet every single qualification. At Galliford Try, we are committed to building a diverse, inclusive and authentic workplace, so if you’re excited about this role but your past experience doesn’t align perfectly with every requirement of the role, we encourage you to apply anyway. You may be just the right candidate for this or other roles. As a Disability Confident employer, we have committed to offer an interview to any candidate with a long-term health condition or disability that meet the essential criteria for the advertised position. Please contact the Resourcing Partner listed within the job advert if you believe this applies to you. We will also take the opportunity to discuss any adjustments required for your interview.” A full job description for this role is available upon request. #LI-SB1

Responsibilities

Oversee the implementation and maintenance of the Information Security Management System (ISMS) in accordance with ISO 27001 standards. Conduct regular risk assessments, internal audits, and develop security policies to ensure organizational compliance.