Information Security Manager

About the role

Faculty is seeking an Information Security Manager to oversee our compliance standards and protect our expanding global infrastructure. You will act as the primary internal authority on security governance, leading the development of our ISO 27001:2022 framework while working directly with senior leadership to shape our risk management strategy.

Key facts

What you'll do

• Manage and refine the ISO 27001:2022 Information Security Management System.
• Create and carry out internal audit plans to ensure security policy compliance across all central departments.
• Act as the lead technical contact for client security due diligence and questionnaires.
• Work with IT and engineering staff to deploy security controls and maintain enterprise architecture.
• Provide the Director of Security with updates on GRC progress, compliance data, and technical threats.
• Assess risk management protocols to support the company as it scales internationally.

Requirements

• Demonstrated experience managing and auditing ISO 27001 frameworks in rapid, high-growth business settings.
• Ability to explain technical security topics to both technical teams and business executives.
• Capacity to negotiate and align with senior stakeholders using a diplomatic approach.
• Must hold or be eligible to obtain UK Security Check (SC) clearance.
• Practical knowledge of cloud platforms such as AWS, Azure, or GCP.

Nice to have

• Experience securing generative AI systems.

Skills & tools

• ISO 27001:2022
• GRC (Governance, Risk, and Compliance)
• Cloud ecosystems (AWS, Azure, or GCP)
• Internal auditing
• Information security management

Practical notes

• Benefits include unlimited annual leave, private dental and healthcare, enhanced parental leave, and Sanctus coaching.
• We offer hybrid working and flexible hours, and we are open to discussing part-time arrangements.
• The interview process consists of a 30-minute talent screen, a 45-minute hiring manager interview, and a 90-minute technical interview.
• We encourage applications from all backgrounds and welcome candidates who meet some but not all of the requirements.