The IT and ISMS Lead holds primary responsibility for the operation and continuous improvement of the company’s Information Security Management System in accordance with ISO 27001:2022. This new position will lead the internal ‘ISO’ team, manage the full audit life cycle and own the business risk register and treatment plan ensuring ongoing compliance and maintaining ISO certification.
This full time, hands-on role has a dual-focus carrying responsibility for maintaining robust, secure and reliable management of the company’s IT infrastructure. This will encompass day-to-day administration providing IT support to all employees including providing support for immediate IT issues, equipment lifecycle management, and project management of all IT upgrades and improvements.
We're looking for demonstrable ISO 27001 expertise, strong organisational skills, good attention to detail and the ability to collaborate across technical and non-technical stakeholders.
Core responsibilities include the management and compliance of the information security management system and IT operations. You will be working closely with, and reporting to the IT and Security Manager for all aspects of the role.
The ideal candidate will be highly organised with experience managing Information Security compliance and ISO management including audit preparation, risk assessment, document control and continuous improvement activity.
- Ideally currently holds or has previously held recognised ISO qualification (e.g. ISO 27001 Lead Implementer or Lead Auditor, Information Technology Infrastructure Library (ITIL) or equivalent security qualifications).
- Previous experience in leading internal and/or external ISO 27001 audits.
- Relevant professional qualification in Information Technology, Computer Science or equivalent experience in a similar role.
- Strong working knowledge of IT infrastructure, end-user devices, software, OS, Cloud services/SaaS platforms.
- Competent in IT administration including: Online services - access control, group policies, Networking and Support / troubleshooting.
- Ability to develop, implement and maintain security policies, procedures and operational documentation
- Excellent organisational skills and attention to detail with the ability to manage multiple work streams simultaneously.
- Have a strong sense of personal ownership and accountability with experience of providing IT support and administration services
- Confident communicator with the ability to work effectively with both technical and non-technical colleagues
- Experience supporting Apple Mac hardware and software.
- Experience administering Google Workspace and MS 365.
- Experience in using and managing mobile device management administration.
- Project planning and leadership skills.
Be yourself
We want to build a fair, respectful and welcoming company, where everyone feels at home. That means taking a long-term approach to equality, diversity and inclusion – not treating it as a tickbox exercise.
With the help of our EDI group, we’re working to make every aspect of the business – including recruitment – fair, respectful and inclusive.
Benefits
Pension – up to 6% employer contribution
Medical and dental insurance (BUPA)
Hybrid working – with at least 3 days a week in our Cambridge office
Up to 12% discretionary bonus
25 days annual leave
5 days of professional development paid for by the company
Death in service benefit
Flexible holiday benefits
Cycle scheme (fully funded by the company)
EV scheme (conditions apply)
You need to have the right to work in the UK. Unfortunately, we can't offer sponsorship either now or in the future.
No agency approaches please.
