British Red Cross
Information Security Manager
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Information Security GRC (Governance, Risk, and Compliance) Manager
Location: UK flexible location (Hybrid, home, and office)
Salary: £54,143 to £58,572 per annum, pro rata, (plus ILW, if residing & working in London)
Hours: 35 per week
Contract: Permanent
Could you lead a team responsible for information security risk management for the British Red Cross, including the identification, assessment, and treatment, as well as third-party and supply chain cyber security risk management?
What will a day in the life of an Information Security GRC Manager involve?
- Develop and maintain the information security governance framework for the British Red Cross, including policies, standards, and processes, ensuring they align with organisational objectives, legal, contractual, regulatory requirements, and best practices.
- Oversee and continuously improve the information security risk management framework, ensuring robust processes for identifying, assessing, recording, and managing information security risks across the British Red Cross.
- Own the management of information security risks, including developing appropriate risk mitigation and treatment plans when risk levels exceed acceptable thresholds, providing regular reporting and insight on key risks, risk trends, and control effectiveness.
- Lead the ISO 27001 certification programme and ongoing compliance with the ISO/IEC 27001 standard.
- Act as the primary point of contact for external auditors and certification bodies, planning and coordinating certification (and surveillance) audits, ensuring that all necessary evidence, documentation, and corrective actions are managed effectively.
- Work in partnership with other stakeholders, departments, and functions to ensure a cohesive approach to information security across the organisation.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
To be a successful Information Security GRC Manager, what will you need?
- Strong emotional intelligence, and a commitment to inclusive leadership, creating an environment where team members can grow and excel.
- Excellent knowledge of common cyber and information security compliance requirements, including PCI DSS (Payment Card Industry Data Security Standard), Cyber Essentials, and the NHS Data Security & Protection Toolkit.
- Proven experience implementing or maintaining an ISO/IEC 27001 certified ISMS, including managing certification audits and continual improvement cycles.
- Strong understanding of enterprise risk management methodologies and tools, particularly as they apply to information security risk identification, assessment (quantitative and qualitative), mitigation, and monitoring.
- Demonstrable experience in information security risk management, including establishing risk assessment processes, running risk workshops, managing risk registers, and presenting risk statuses to senior management or governance boards.
Interested?
Get help with your application
Your very own career expert that helps elevate your application to the next level.
The closing date for applications is 23.59 on Thursday the 13th of August 2027 with interviews to follow.
In return for your commitment and expertise, you’ll get:
- Flexible working: Remote and hybrid working, flexitime, compressed hours, and job sharing.
- Holidays: 36 days annual leave (including bank holidays) + option to buy 5 extra days.
- Pension scheme: Up to 6% contributory pension.
- Learning & Development: A range of career & learning opportunities.
- Discounts: Blue Light Discount Card, Tickets For Good & employee benefits platform.
- Wellbeing Support: Peer Supporters, CiC (EAP) & Headspace App.
- Cycle2Work: Lease a bicycle through the scheme.
We are proud to champion inclusion as a Disability Confident employer across our UK-based roles and as a Carers Confident employer.
We are dedicated to building an inclusive, equitable and wellbeing‑focused culture where everyone feels safe, valued and can thrive. Guided by our Equity, Diversity, Inclusion and Wellbeing Strategy, we foster belonging, psychological and physical wellbeing, and work to remove barriers to fair opportunities. Grounded in compassion and anti‑racist practice, we listen to diverse voices, value lived experience and create environments where staff and volunteers can succeed. Join us and be part of an organisation that leads with care, celebrates difference and helps everyone succeed.
Together, we are the world's emergency responders.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location