Information Security Manager
Plumstead Consulting - southampton, south east england
Apply NowJob Description
INFORMATION SECURITY MANAGEROur client is one of the largest owner-operator of rapid electric vehicle charging stations across the UK and Europe. They are award winners and are currently short listed for " The Best Place to Work" .They are growing and expanding at pace, are you up for the ride.They are seeking a highly skilled and experienced Information Security Manager to join our team.You will work closely with the clients international IT team to lead the organisation’s cybersecurity and information risk agenda, including oversight of ISO 27001 and broader security governance across the business. Key Responsibilities:Maintain the Information Security Management System (ISMS) in compliance with ISO 27001:2022 standards.Establish, maintain and enforce security policies, procedures, and controls to mitigate information security risks and vulnerabilities.Conduct regular risk assessments and vulnerability assessments to identify potential threats and weaknesses in our information security infrastructure.Collaborate with internal stakeholders to ensure that information security requirements are integrated into business processes and systems.Lead internal audits and coordinate external audits and certifications to assess ISMS effectiveness and drive continuous improvement.Define and enforce information security policies, standards, and guidelines across the organisation and Monitor compliance with all information security policies, procedures, and standards.Management of tabletop/red team exercises and incident response playbooks.Assist the incident response process and lead investigations into information security breaches or incidents.Provide guidance and support to employees on information security matters and promote a culture of security awareness throughout.Stay up to date with the latest information security trends, threats, and best practices, and make recommendations for enhancing the organisation’s security posture.Conduct technical assessments of new suppliers, platforms, and software, including security architecture reviews, documentation checks, and evidence of compliance (e.g., ISO, SOC 2, pen test results).Collaborate with procurement, legal, and product teams to embed security requirements in onboarding and contract processes.Prepare and deliver reports on information security metrics, incidents, and compliance to senior management and relevant stakeholders.Qualifications and Skills;Professional certifications in information security, such as CISSP, CISM, ISO 27001 Lead Auditor/Implementer, or equivalent.Extensive experience (5+ years) in information security management, with a focus on ISO 27001 compliance.In-depth knowledge of ISO 27001 standards and best practices, as well as other relevant security frameworks (e.g., NIST, COBIT).Strong technical understanding of modern IT and cloud environments, including the ability to assess third-party platforms, suppliers, and software for security risks.Proven experience in developing and implementing information security policies, procedures, and controls.Familiarity with risk assessment methodologies and tools.Experience in managing information security incidents and conducting investigations.Excellent communication and interpersonal skills, with the ability to effectively collaborate with stakeholders at all levels of the organisation.Strong analytical and problem-solving abilities.Demonstrated ability to manage multiple priorities and meet deadlines in a fast-paced environment.High level of integrity and a commitment to maintaining confidentiality.Join our dynamic team and contribute to the protection and security of our organisation’s information assets. Apply your expertise as an ISO 27001 Information Security Manager and help us maintain a robust information security program.Equal Opportunity Statement:They an equal opportunity employer. We are committed to equality and diversity, and all applicants will be considered for employment without attention to race, colour, religion, sex, sexual orientation, gender identity, national origin, or disability status.
Created: 2025-08-30