Information Security Lead (GRC)

GRC ISO 27001 ISMS Security Audits Risk Management Cyber Security Information Security Networks

Are you an experienced Information Security / Cyber Security professional with strong hands-on GRC, ISO 27001 and Security Audit experience, combined with a technical understanding of Cyber Security?

We’re recruiting an Information Security Lead / Cyber Security Lead for a leading international SaaS software business, offering the opportunity to take greater ownership across Information Security, GRC, Security Governance, Risk, Compliance and Cyber Security.

Strong GRC and audit experience is essential. We’re looking for someone who understands how to operate and improve an ISMS, support ISO 27001, manage security risk and controls, and work confidently across internal audits, external certification audits, customer assurance and supplier security.

Ideally, you’ll have developed your career from an IT, Infrastructure, Network or technical Cyber Security background before moving into broader Information Security and GRC.

THE ROLE

You’ll work closely with the Head of Information Security, helping maintain and continually improve the organisation’s Information Security, GRC and compliance environment.

Your remit will include ISO 27001, ISMS, security audits, risk assessments, policies and controls, customer assurance, supplier security and audit remediation, alongside Cyber Essentials and wider certification activities.

You’ll also work closely with technical teams across vulnerability management, patching, penetration testing, incident response, Business Continuity and Disaster Recovery, ensuring security risks and audit findings translate into practical improvements.

We’re particularly interested in strong experience across:

• GRC & Security Governance: ISO 27001, ISMS, Risk Management, Security Policies, Controls, Compliance and Information Security Governance.

• Security Audits & Assurance: Internal Audits, External Audits, Certification Audits, Audit Evidence, Remediation, Customer Assurance and Supplier Assurance.

• Cyber Security: Vulnerability Management, Penetration Testing, Patch Management, Incident Response and Security Controls.

• Resilience & Compliance: Cyber Essentials, Business Continuity, Disaster Recovery, DPIAs, BIAs and Third-Party Risk.

You’ll ideally have 5+ years’ experience across Information Security, Cyber Security, GRC, IT Risk, Compliance or Security Assurance.

You don’t necessarily need to already be an Information Security Manager. We’d also like to hear from Information Security Leads, GRC Leads, Senior Information Security Analysts, Senior Cyber Security Analysts, Information Security Consultants, IT Risk & Compliance professionals and Security Engineers who have developed substantial GRC and audit experience., If you have strong GRC + ISO 27001 + Security Audit + Information Security experience, combined with a good technical security foundation, we’d like to hear from you.

£60,000 - £70,000 + Excellent Benefits Permanent, The strongest candidates will bring genuine GRC, ISO 27001 and audit experience, but also enough technical understanding to work credibly with Infrastructure, Networks, IT Operations and Software Engineering teams.

You’ll be equally comfortable discussing audit findings, risk and ISO 27001 controls with senior stakeholders as you are working with technical teams on vulnerabilities, remediation and security improvements.

A great opportunity to join a leading international SaaS software business and take broader ownership across Information Security, GRC, Audit and Cyber Security.

£60,000 - £70,000 + Excellent Benefits

Bedford Hybrid - 1 day a week Office