An innovative medical technology organisation is seeking an experienced Information Security Manager to lead and develop its information security and cyber risk capability.
Reporting to the COO, you will own the organisation’s security programme, ensuring governance, risk, and compliance align with business and regulatory requirements.
Role Overview
You will lead the development and continuous improvement of the Information Security Management System (ISMS), combining strategic oversight with hands-on delivery in a regulated, fast-paced environment. Acting as the organisation’s subject matter expert, you will support internal teams and engage with external partners, auditors, and regulators.
Key Responsibilities
Information Security & ISMS
- Own and deliver the information security and cyber risk programme
- Manage and maintain the ISMS, supporting ISO 27001 certification
- Develop and implement policies, standards, and procedures
- Establish governance, risk, and assurance processes
- Oversee third-party and supplier security risk
Compliance & Regulatory
- Ensure compliance with GDPR, ISO 27001, and other applicable standards
- Support alignment with medical device regulations and QMS
- Act as a key contact for audits and regulatory activities
- Lead incident response, including planning and post-incident review
- Identify, assess, and communicate risks to stakeholders
- Monitor emerging threats and regulatory developments
Stakeholder Engagement
- Provide clear security guidance to technical and non-technical audiences
- Support customer assurance and external audits
- Promote a strong security culture across the organisation
Candidate Requirements
- Experience in information security, cyber security, or technology risk
- Strong knowledge of ISO 27001 and ISMS management
- Understanding of GDPR and data protection practices
- Experience in regulated or compliance-driven environments
- Analytical, organised, and solution-oriented approach
- Experience in MedTech, healthcare, or regulated industries
- Knowledge of ISO 13485, IEC 62304, NIST, SOC 2, or HIPAA
- Start-up or scale-up experience
What’s on Offer
- Opportunity to contribute to patient care and surgical innovation
- Access to advanced MedTech facilities in Central London
- Competitive salary + equity
- 25 days holiday + bank holidays
- Employee Assistance Programme
- Cycle to Work & nursery benefits
- £150 annual tech stipend
- Office snacks, drinks, and regular team socials
#J-18808-Ljbffr…