Information Security Manager - London - Fintech - £60-70k

This job has now expired please search on the home page to find live IT Jobs.

Information Security Manager

London - Fintech

£70k

I am currently running a search for an Information Security Manager to work for one of my Fintech clients based in Central London. This role will be reporting into the Global Head of Operations. This is a brand-new role in this company and the Security Manager will be responsible for managing and maintaining their ISO27001:2013 ISMS.

In this role you will be able to take full responsibility of the ISO27001 and able to implement change across the business in order to improve polices and procedures. You will work very closely with the sales team as well as the tech team to make sure standards are met.

Key Responsibilities:

* Lead the development, documentation and maintenance of information security policies, procedures, and standards across the organisation

* Implementation of ISO27002 best practices where appropriate

* Working closely with Sales to ensure any prospective client has any security governance questionnaires responded to accurately and timely

* Assist in system and software architecture and design to ensure that data and assets are appropriately secure at all times

* Working closely with legal in advice and responses to legal teams regarding ISMS

* Ensuring ISMS is updated and improved (In accordance with requirements and potential client recommendations)

* Proactively initiate, facilitate, and promote activities to create awareness of information security throughout the company

* Ensuring internal audits are carried out satisfactorily and timely

* Investigated and implement additional controls such as SOC2/3

* To investigate suspected and actual security incidents in accordance with the security incident management standard, produce reports with recommendations and ensure any remedial action is taken.

* Maintenance and control of Risk Register

* Acting as Data Protection Officer for the group, assist the group in maintaining DPA/GPDR standards.

Skills Required:

* At least 5 years work experience in Information Security Management

* Full understanding of ISO27001:2013 process including setting up from scratch and auditing

* Knowledge of the laws, regulations, and standards relating to IT security

* Knowledge of ITIL or an understanding of.

Education /Qualifications Highly Desired:

* Qualifications with any of the following: CISMP, CISM, CEH, CRISC, CISSP or ISO27001 Auditor

* Knowledge and experience of SOC2 standards and implementation

* Knowledge or Experience of business continuity planning, in line with industry standards for example ISO22301.

Please click apply now