Head of Information Security and Privacy

You will be responsible for the implementation and management of the Information management system, including third-party risk, ensuring its effectiveness is regularly assessed through external and internal audits., * Responsible for the development and management of information and cyber security frameworks and overseeing the management of the Information and Records Management.

• Develop and promote policies to ensure compliance with regulations, standards and good practice relating to information security management.
• Responsible for research and awareness of emerging security risks, ensuring solutions, services, policies, procedures and information security education programme are updated in reasonable timeframes to mitigate against new risks.
• Responsible for making sure that the organisation is compliant with Information Security Standards (e.g. ISO 27001), ensuring all governance and audit requirements are undertaken.
• Ensure that the organisation is appropriately protected in line with business needs against information and cyber risks including third-party and suppliers.

• Information Security Manager or equivalent with relevant industry experience.
• Experience of managing and overseeing ISO 27001 audits, Cyber Essentials and Cyber Essentials Plus.
• Develop and lead information and cyber security strategies, roadmaps and maturity plans.
• Provide technical security guidance and assurance to technical and non-technical stakeholders.
• Design and deliver security awareness programmes that improve understanding and influence behaviour.
• Support business continuity and resilience planning, testing and lessons learned.
• Engage senior stakeholders and committees through clear reporting, influence and constructive challenge

The role is hybrid, 2-3 days a week in their office in South London and comes with a very competitive benefits package.