Information Security Manager

Information Security Manager - ISO27001 accreditation

Location: Manchester – 4 days onsite per week

Salary: £80,000–£100,000 per annum

The Opportunity

We are working with a client seeking an experienced Information Security Manager to lead and drive information security governance, risk and compliance, with a particular focus on GDPR, data protection and ISO 27001 accreditation.

This is a GRC-focused role rather than a hands-on technical security position. The successful candidate will have a proven track record of taking organisations through the ISO 27001 accreditation process from scratch , establishing the necessary frameworks, policies, controls and governance structures to achieve certification and maintain ongoing compliance.

This is an excellent opportunity for someone who can combine strategic oversight with a hands-on approach to building and embedding a robust information security and data protection framework across an organisation.

Key Responsibilities

• Lead the end-to-end implementation of ISO 27001, taking the organisation from initial assessment through to successful accreditation.
• Develop, implement and maintain an Information Security Management System (ISMS), ensuring alignment with ISO 27001 requirements and business objectives.
• Own and drive the organisation's governance, risk and compliance (GRC) activities, identifying and managing information security and data protection risks.
• Ensure compliance with GDPR, UK data protection legislation and relevant regulatory requirements.
• Develop and maintain information security policies, procedures, risk registers, control frameworks and supporting documentation.
• Conduct gap analyses, risk assessments and internal audits, coordinating remediation activities to address identified weaknesses.
• Prepare the organisation for external audits and certification assessments, working closely with auditors and key stakeholders.

Required Experience:

• Proven experience implementing ISO 27001 from scratch and successfully taking an organisation through to accreditation. This is a key requirement for the role.
• Strong knowledge of information security governance, risk management and compliance frameworks.
• A solid understanding of GDPR, UK data protection legislation and information governance.
• Experience developing and embedding an ISMS, including policies, procedures, controls and audit processes.
• The ability to engage confidently with senior stakeholders and influence decision-making across the organisation.
• Strong communication, stakeholder management and organisational skills.
• A pragmatic, hands-on approach to building and maintaining compliance frameworks in a complex business environment.

Desirable Experience

• Professional certifications such as CISSP, CISM or ISO 27001
• Experience working within the utilities, infrastructure or construction sectors, particularly in complex project-based environments.
• Experience managing external audits, certification bodies and ongoing ISO 27001 compliance.
• The ability to translate regulatory and compliance requirements into practical, business-focused solutions.

The Details

• Salary: £80,000–£100,000 per annum, depending on experience.
• Location: Manchester.
• Working arrangement: Four days onsite per week.