What’s involved?

The IT and ISMS Lead holds primary responsibility for the operation and continuous improvement of the company’s Information Security Management System in accordance with ISO 27001:2022. This new position will lead the internal ‘ISO’ team, manage the full audit life cycle and own the business risk register and treatment plan ensuring ongoing compliance and maintaining ISO certification.

This full time, hands-on role has a dual-focus carrying responsibility for maintaining robust, secure and reliable management of the company’s IT infrastructure. This will encompass day-to-day administration providing IT support to all employees including providing support for immediate IT issues, equipment lifecycle management, and project management of all IT upgrades and improvements.

We're looking for demonstrable ISO 27001 expertise, strong organisational skills, good attention to detail and the ability to collaborate across technical and non-technical stakeholders.

Core responsibilities include the management and compliance of the information security management system and IT operations. You will be working closely with, and reporting to the IT and Security Manager for all aspects of the role.

Must have

The ideal candidate will be highly organised with experience managing Information Security compliance and ISO management including audit preparation, risk assessment, document control and continuous improvement activity.

● Ideally currently holds or has previously held recognised ISO qualification (e.g. ISO 27001 Lead Implementer or Lead Auditor, Information Technology Infrastructure Library (ITIL) or equivalent security qualifications).

● Previous experience in leading internal and/or external ISO 27001 audits.

● Relevant professional qualification in Information Technology, Computer Science or equivalent experience in a similar role.

● Strong working knowledge of IT infrastructure, end-user devices, software, OS, Cloud services/SaaS platforms.

● Competent in IT administration including: Online services - access control, group policies, Networking and Support / troubleshooting.

● Ability to develop, implement and maintain security policies, procedures and operational documentation

● Excellent organisational skills and attention to detail with the ability to manage multiple work streams simultaneously.

● Have a strong sense of personal ownership and accountability with experience of providing IT support and administration services

● Confident communicator with the ability to work effectively with both technical and non-technical colleagues

Nice to have

● Experience supporting Apple Mac hardware and software.

● Experience administering Google Workspace and MS 365.

● Experience in using and managing mobile device management administration.

● Project planning and leadership skills.

Be yourself

We want to build a fair, respectful and welcoming company, where everyone feels at home. That means taking a long-term approach to equality, diversity and inclusion – not treating it as a tickbox exercise.

With the help of our EDI group, we’re working to make every aspect of the business – including recruitment – fair, respectful and inclusive.

Benefits

• Pension – up to 6% employer contribution

• Medical and dental insurance (BUPA)

• Hybrid working – with at least 3 days a week in our Cambridge office

• Up to 12% discretionary bonus

• 25 days annual leave

• 5 days of professional development paid for by the company

• Death in service benefit

• Flexible holiday benefits

• Cycle scheme (fully funded by the company)

• EV scheme (conditions apply)

*You need to have the right to work in the UK. Unfortunately, we can't offer sponsorship either now or in the future.
*No agency approaches please.