Information Security & Business Continuity Contractor

Information Security & Business Continuity Contractor

Posted 7 days ago by Broadgate

Negotiable
Undetermined
Undetermined
Greater London, England, United Kingdom

Summary: The Information Security & Business Continuity Manager is responsible for leading and managing the organization's frameworks for information security and business continuity. This role ensures that policies and processes align with business strategy and regulatory requirements while maintaining a strong security posture. The manager will oversee incident response, develop continuity programs, and enhance stakeholder awareness of security practices. Additionally, the position requires collaboration with various departments to ensure operational resilience and compliance with industry standards.

Key Responsibilities:

  • Develop, maintain, and enhance the organisation’s Information Security Policy.
  • Monitor adherence to Information Security policies using appropriate tools and risk assessments.
  • Produce, maintain, and enforce Information Security standards and operational processes.
  • Ensure access to information systems is restricted to authorised users.
  • Monitor communications and information systems for misuse or potential threats.
  • Lead the Security Incident Response Team during major incidents.
  • Evaluate emerging technologies and recommend suitable solutions.
  • Develop and maintain an organisation-wide Business Continuity Program.
  • Coordinate departmental Business Continuity Plans and organise regular testing.
  • Create and maintain documentation such as recovery plans and emergency procedures.
  • Support crisis management and emergency response activities.
  • Raise the profile of Information Security and Business Continuity across the organisation.
  • Report on Information Security and Business Continuity matters to senior management.
  • Comply with relevant regulatory requirements and conduct standards.

Key Skills:

  • 5+ years of relevant experience in Information Security Management.
  • Strong background in developing and implementing information security frameworks.
  • Good knowledge of Information Security tools and best practices.
  • Strong understanding of Business Continuity strategy and planning.
  • Excellent knowledge of major IT technologies.
  • Ability to influence stakeholders across business and IT functions.
  • Strong negotiation skills with internal and external parties.
  • Excellent interpersonal, communication, and leadership abilities.
  • High levels of initiative and a proactive mindset.
  • CISSP or equivalent professional certification (desirable).

Salary (Rate): undetermined

City: Greater London

Country: United Kingdom

Working Arrangements: undetermined

IR35 Status: undetermined

Seniority Level: undetermined

Industry: Other

Detailed Description From Employer:

Job Description: Information Security & Business Continuity Manager

Role Purpose

To lead and manage the organisation’s Information Security and Business Continuity frameworks, ensuring policies, standards, and processes effectively support business strategy, regulatory requirements, and operational resilience. The role is responsible for maintaining a strong security posture, safeguarding information assets, and ensuring the organisation can respond effectively to disruptions.

Key Responsibilities

Information Security

  • Develop, maintain, and enhance the organisation’s Information Security Policy to meet evolving business and technology needs.
  • Monitor adherence to Information Security policies using appropriate tools, techniques, and risk assessments.
  • Produce, maintain, and enforce Information Security standards, guidelines, and operational processes.
  • Ensure that access to information systems is appropriately restricted to authorised users.
  • Monitor communications and information systems (e.g., email, internet, desktops) to detect misuse, fraud, or potential external threats.
  • Lead or coordinate the Security Incident Response Team during major incidents and report security-related issues to internal management and external authorities where legally required.
  • Evaluate emerging technologies, tools, and industry trends, recommending suitable solutions for integration into the IT strategy.
  • Participate in architectural governance processes and change approval forums to represent Information Security requirements.
  • Contribute Information Security needs to the strategic IT planning process.

Business Continuity & Disaster Recovery

  • Develop and maintain an organisation-wide Business Continuity Program covering disaster recovery, business recovery, and emergency response.
  • Coordinate departmental Business Continuity Plans, ensuring alignment with corporate BCP requirements and organising regular testing.
  • Create and maintain documentation such as recovery plans, emergency procedures, call lists, and test reports.
  • Analyse functional areas to identify vulnerabilities, single points of failure, and risk mitigation strategies.
  • Support crisis management and emergency response activities when a business disruption occurs.
  • Ensure Disaster Recovery processes align with Information Security policy requirements.
  • Monitor regulatory and industry developments affecting Business Continuity and Disaster Recovery and advise on implications.

Communication & Stakeholder Management

  • Raise the profile of Information Security and Business Continuity across the organisation by building relationships, increasing awareness, and gaining business alignment.
  • Report on Information Security and Business Continuity matters to senior management as required.
  • Work collaboratively with internal stakeholders and external partners, negotiating effectively to support organisational goals.

Regulatory Compliance

  • Comply with relevant regulatory requirements and conduct standards applicable to the organisation’s industry.
  • Take reasonable steps to prevent breaches of regulatory conduct rules.

Person Specification

Essential Criteria

Experience

  • 5+ years of relevant experience in Information Security Management.
  • Strong background in developing and implementing information security and business continuity frameworks.

Skills & Knowledge

  • Good knowledge of Information Security tools, techniques, and best practices.
  • Strong understanding of Business Continuity strategy and planning.
  • Excellent knowledge of major IT technologies, including web, client-server, mainframe, and network environments.
  • Ability to influence stakeholders across business and IT functions.
  • Strong negotiation skills with both internal and external parties.
  • Excellent interpersonal, communication, and leadership abilities.
  • High levels of initiative, drive, and a proactive “can do” mindset.

Desirable Criteria

CISSP or equivalent professional certification.