Yolk Recruitment Ltd
Information Security Manager
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Information Security Manager
Location: South Wales
Yolk Recruitment is exclusively partnered with a growing technology business seeking an Information Security Manager for a pivotal role with real ownership, visibility, and influence.
About the Role
This position offers the opportunity to take full responsibility for information security governance in a regulated business, where ISO 27001, data protection, supplier assurance, audit readiness, and risk management are critical.
As the internal point of expertise for information security, the Information Security Manager will oversee the Information Security Management System (ISMS), shaping how security is understood, managed, and improved as the business expands. The role spans compliance, risk, governance, and technical security, requiring enough technical understanding to collaborate with IT stakeholders, define effective controls, and assess their performance.
Working closely with senior leadership and across IT, Operations, Legal, and business functions, you’ll ensure that policies, controls, audits, risk reviews, corrective actions, and awareness activities are not just documented but actively embedded.
Responsibilities
As the Information Security Manager, you will:
- Own, maintain, and continuously improve the ISMS in alignment with ISO 27001.
- Manage information security risk assessments, treatment plans, and the risk register.
- Plan and deliver the internal audit programme for information security.
- Prepare the business for ISO 27001 surveillance and recertification audits.
- Monitor corrective actions, non-conformities, and audit evidence.
- Develop, review, and maintain key information security policies and procedures.
- Support GDPR, NIS2, and broader information governance obligations.
- Lead the incident response process, including escalation, investigation, and lessons learned.
- Assess third-party and supplier information security risks.
- Promote awareness initiatives across the organisation.
- Report to senior management on risk, audit performance, incidents, control effectiveness, and compliance.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Requirements & Experience
Essential:
- Demonstrable experience in compliance, information security, risk management, or governance.
- Deep familiarity with ISO 27001.
- Experience in managing, implementing, or auditing an ISMS.
- A strong technical understanding to work effectively with IT stakeholders according to control design and effectiveness.
Desirable:
- Certification as an ISO 27001 Lead Implementer or Lead Auditor.
- Advanced professional qualifications: CISM, CISSP, CRISC, or an information security degree/equivalent.
- Proficiency in risk assessment frameworks, such as ISO 27005 or NIST.
- Hands-on experience in planning and executing internal audits.
- Experience planning and conducting internal audits.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Soft Skills & Compliance Knowledge:
- A solid grasp of GDPR, data protection principles, and breach notification requirements.
- Confidence in engaging with senior stakeholders, technical teams, and external auditors.
- Clear, practical communication capabilities for policy documentation, procedure reviews, and reporting.
- Preference for experience in regulated or audit-driven environments, while strong ISMS ownership remains the key requirement.
Benefits
- Competitive salary aligned with experience level.
- 25 days of holiday, inclusive of bank holidays.
- Annual company bonus.
- Pension scheme featuring 5% company contribution.
- Regular salary reviews.
- Cycle to Work Scheme.
- Flexible working hours, including an early finish on Fridays.
- Significant influence across the organisation, shaping a critical compliance function in a progressive, future-focused business.
Are you ready to take on this challenge? If equipped with the needed skills, experience, and enthusiasm for this Information Security Manager role, apply immediately!
Please note: Whilst we strive to contact all candidates promptly, due to high application volumes, we cannot guarantee responses. Applications without a response within 7 days indicate unsuccessful consideration. Further opportunities may be found on our website.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location