Information Security Compliance Lead

Information Security Compliance Lead
Salary: 61,474 - 65,000 | Permanent
Location: London (one day a week in the office)
Shape the future of Information Security in one of London's most ambitious Boroughs
Global Resourcing are supporting a London borough in the search for an Information Security Compliance Lead.
As the borough continue their digital transformation journey, they are looking for an experienced Information Security Compliance Lead to play a pivotal role in protecting their systems, data and services. This is an opportunity to join a forward thinking council with a strong digital vision that encourages innovation, challenges convention and puts residents at the heart of everything they do.
The Council are looking for a self-sufficient, proactive and highly motivated security professional who thrives on ownership, enjoys influencing at all levels, and can confidently lead the security compliance agenda while working alongside a talented and supportive team.
This is a genuine opportunity to make a borough wide impact, leading the development of a mature security and compliance function while helping to shape the future of information security across the council.
About the Role
As Information Security Compliance Lead, you will be responsible for overseeing and continuously improving the information security compliance framework, ensuring systems, services and data remain secure and resilient.
Working closely with the Information Security Manager, Security Operations Manager and wider business stakeholders, you will lead compliance with ISO 27001:2022 and manage the Information Security Management System (ISMS)
This is a leadership role requiring strong technical expertise, commercial awareness, excellent stakeholder engagement skills and the ability to independently drive initiatives from conception through to delivery.
Key Responsibilities

• Lead and develop the Information Security Compliance Team through effective leadership, coaching and mentoring.
• Act as the operational lead for the council’s Information Security Management System (ISMS) and drive continual improvement.
• Take ownership of the ISO 27001:2022 compliance journey and maintain certification standards.
• Develop, implement and maintain security policies, standards, procedures and governance frameworks.
• Coordinate internal and external audits, ensuring findings are effectively managed and remediated.
• Work closely with senior leaders and business stakeholders to identify, assess and mitigate information security risks.
• Act as a trusted adviser on information security, risk management and regulatory compliance matters.
• Promote security awareness across the organisation, helping colleagues understand threats, responsibilities and best practice.
• Support incident response activities and ensure lessons learned are translated into stronger controls and reduced risk.
• Collaborate on key compliance initiatives including the NCSC Cyber Assessment Framework (CAF), data protection and regulatory requirements.
• Contribute to recruitment, performance management and capability development within the compliance function.

About You
We're seeking an experienced information security professional who combines technical credibility with leadership capability and a collaborative approach.
You'll be someone who can confidently work independently, take ownership of complex challenges and build strong relationships across a large and diverse organisation. You'll be equally comfortable discussing governance and compliance with senior stakeholders as you are reviewing security controls and audit findings.
Most importantly, you'll be passionate about making a difference through secure, resilient and effective digital services.
Industry background is less important than your ability to lead, influence and deliver. The organisations are looking for a self starter with strong information security expertise who can bring fresh perspectives and thrive within a progressive, collaborative local authority.
Essential Experience & Skills

• Demonstrable experience managing or leading Information Security Compliance functions.
• Strong knowledge of ISO 27001:2022 and Information Security Management Systems (ISMS).
• Experience leading compliance programmes, audits and certification activities.
• Proven ability to influence and engage stakeholders at all levels.
• Strong understanding of information security governance, risk and compliance.
• Knowledge of data protection legislation and privacy requirements.
• Experience with security controls, risk management, disaster recovery and business continuity planning.
• Understanding of cyber threats, vulnerabilities, attack methods and mitigation techniques.
• Knowledge of cloud security principles and modern security architectures.
• Excellent communication, organisational and relationship-building skills.
• Ability to work autonomously, prioritise effectively and drive initiatives through to completion.

Relevant Professional Certifications
We welcome candidates holding one or more of the following:

• CISSP
• ISO 27001 Lead Implementer
• ISO 27001 Lead Auditor
• ISO 31000 Risk Management
• CCSP
• SCCP (or equivalent security certification)

Personal Attributes
You will be:

• A self-starter who takes ownership and accountability.
• A confident leader who can inspire and develop others.
• Passionate about Information Security and continuous improvement.
• An excellent communicator with strong attention to detail.
• Resilient, adaptable and solutions-focused.
• Collaborative, approachable and committed to delivering positive outcomes.
• Motivated by public service and the opportunity to make a meaningful impact.

If you're an experienced information security professional looking for a role where you can lead, influence and create meaningful impact across a progressive London borough, we'd love to hear from you.