ISMS Manager (ISO 27001 and Vanta)
About this role
Intelance is a UK advisory and assurance firm working across enterprise architecture, cyber assurance, AI governance and data governance. We run information security management systems (ISMS) for growing technology companies, so their engineers can stay focused on their product. We are appointing an experienced ISMS Manager as an associate contractor to run client ISMS programmes day to day.
Your first assignment is an ISO/IEC 27001:2022 certified technology company with offices in the UK and Asia. The work runs from December 2026 through their surveillance audit in April 2027, then continues monthly. Expect about 4 to 6 days a month at the start, settling to 2 to 3 days a month. You will report to our Cyber Assurance lead, who stays accountable for quality.
This is an associate panel role. Each assignment is agreed separately with a written scope, timetable and day rate.
Tasks
Run the client's ISMS day to day inside Vanta and Notion.
Close open audit non-conformities with evidence the certification body will accept.
Keep the risk register, risk treatment plan and Statement of Applicability up to date.
Run supplier security assessments and keep supplier records current.
Track and chase control owners so policies, training, access reviews and device checks are done on time.
Prepare and run the management review with the client's leadership.
Support the independent internal audit and close any findings it raises.
Prepare the client for the surveillance audit and support them on the day.
Report progress each month in plain English, with clear actions, owners and dates.
Follow Intelance quality, security, confidentiality and conflict of interest procedures.
Requirements
Essential
At least three years running or maintaining an ISO 27001 ISMS.
Taken at least one organisation through an ISO 27001 certification or surveillance audit.
Hands on experience with Vanta, or a similar platform such as Drata or Secureframe.
Good working knowledge of ISO/IEC 27001:2022 and the 2022 Annex A controls.
Experience with cloud based or SaaS businesses using Google Workspace or Microsoft 365.
Able to keep busy engineers and leaders on track without slowing their work.
Clear, concise writing that non technical leaders understand.
Based in the UK and able to work as a self-employed contractor.
Desirable
ISO/IEC 27001 Lead Implementer or Lead Auditor certificate.
Experience with UK GDPR records of processing and data protection impact assessments.
Experience with companies that have offices in more than one country.
Experience with SOC 2 alongside ISO 27001.
Benefits
Join Intelance's specialist cyber assurance associate panel.
Steady monthly work on a managed ISMS service that is growing.
Remote work with a written scope, timetable and agreed day rate.
Support from an experienced assurance team, with structured templates and quality review.
Flexible, project based work you can fit around other commitments.
Apply with your CV. Shortlisted candidates will be asked for certificate evidence and references. Anonymised examples of past work are enough at application stage. Please do not send confidential client material.
Find Jobs in United Kingdom on Arbeitnow
