Information Security Manager

About the role

The Global Top Tier Fund is seeking an experienced Information Security professional to lead its Governance, Risk, and Compliance (GRC) and Security Assurance function. This senior, hands‑on position focuses on ISO 27001 certification, SOC 2 programmes and broader assurance activities within a modern, cloud‑based environment.

Key responsibilities

• Own the organisation’s ISO 27001 certification and Information Security Management System (ISMS), including audits, continual improvement and compliance.
• Lead SOC 2 Type I and Type II activities, coordinating with external auditors and managing audit evidence, findings and remediation.
• Oversee security controls, audit evidence and remediation across a cloud‑centric technology stack.
• Provide security assurance and governance support to senior leadership and technical teams.
• Develop and scale the organisation’s GRC and assurance capabilities as the business grows.

Required profile

• Significant experience in Information Security, GRC, Security Assurance or IT Audit, preferably in finance, FinTech or regulated financial services.
• Demonstrated ownership of ISO 27001 certification and audit processes.
• Experience leading SOC 2 Type I/II programmes.
• Strong understanding of security controls, audit processes, evidence collection and remediation.
• Ability to work effectively with senior stakeholders and technical teams.

Required skills

• ISO 27001 certification management
• SOC 2 audit coordination
• GRC/assurance tooling
• Cloud environment security (e.g., AWS, Azure)
• Risk and compliance frameworks