Information Security Manager

The Information Security Manager is responsible for establishing, implementing, and maintaining Kaizen’s information security programme. The role ensures the confidentiality, integrity, and availability of information assets while supporting business objectives, regulatory compliance, and cyber resilience.

We are a multi-award winning RegTech company on a mission to transform the quality of regulatory reporting in the financial services industry. We've combined regulatory expertise with advanced technology to develop our market-leading quality assurance services. Unique in being able to fully assess data quality, our services are used by some of the world’s largest investment banks, asset managers, hedge funds and brokers, helping them to reduce costs, improve quality and increase confidence in their regulatory reporting.

Kaizen partners with Cybernetic Controls Limited to assist with our recruitment process and provide an optimum candidate experience.

Key Responsibilities

• Ensure the Kaizen’s group data and information is protected from unauthorised access
• Lead and manage the the offshore Information security function
• Implementing and ensuring security policies across the Kaizen Group
• Own and be accountable for the defence in depth and other programmes of work
• Ensure alignment with, and ongoing compliance of, Kaizen’s ISO27001:2022 & SOC2 certifications
• Maintain staff awareness of information security policies and standards
• Advise on security policy and processes across the organisation
• Respond to security related incidents and post event reporting
• Monitor security vulnerabilities and threats across the organisation’s services
• Coordinate security assessments across the organisation’s services
• Maintain relationships both internal and external to the function by attending meetings and as required and escalate findings and concerns to the CISO or CTO
• Ensure third party risk assessments are carried out and maintained
• Maintenance of the Kaizen Group Information Security Management System
• Ensure client due diligence and risk management questionnaires are completed in a timely manner

Skills, Knowledge and Expertise

Skills:

• Information Security Management
• Security Operations and Incident Response
• Vulnerability Management
• Cloud Security (AWS, Azure, Microsoft 365)
• Identity and Access Management
• Modern cloud computing and network environments
• Leadership & team management
• Stakeholder engagement

Knowledge:

• Information Security Management Systems
• ISO27001:2022 requirements and certification processes 
• SOC 2 control frameworks 
• Risk management methodologies
• Security operations, incident response and forensic principles 
• Vulnerability management and testing 

Experience:

• Solid background in Information Security (ideally 3+ years at a mid to senior level)
• Management of ISO27001/SOC2 Type II compliance regimes
• Security incident response and conducting investigations.
• Risk assessments and management.
• Supplier and audit management.

Qualifications:

• Higher level education qualification or equivalent experience in Information Security, Cyber Security or other related discipline
• One or more recognised security certifications such as:
• CISM
• CISA
• ISO27001 Lead auditor
• CRISC
• CCSP
• CEH

Benefits

• Company pension (5% of your base salary)
• 25 days' annual leave, plus UK bank holidays and your birthday
• Employee Assistance Programme
•  Annual pay review
• Discretionary bonus (paid across three years, as per contract schedule)
• Private medical insurance 
• Discount on private health assessment
• Upfront cost of an Apple watch covered via the health scheme
• Medical cashback plan 
• Wellbeing allowance of up to £50 per month
• Up to £1,000 per year towards learning any new skill of your choosing
• Salary sacrifice electric car scheme 
• Salary sacrifice bike scheme 
• Childcare contribution of up to £3,000 per year for dependants ages five and under
•  Various retail discounts via Shop st.