Information Security Manager 75,000 PALondon - hybrid working A well-established construction engineering business is seeking an experienced Information Security Manager to join them on a permanent basis. You''ll be joining at a key time as the organisation expands its technical capability, with ambitious growth plans and multiple mergers and acquisitions planned. The Information Security Manager will own the organisation''s information security and data governance frameworks, ensuring data is secure, accurate and compliant across its full lifecycle. The role will maintain ISO27001 documentation and controls, support ongoing audit readiness and enforce robust governance policies for data quality, access and usage. Responsibilities: Maintain ISO27001 documentation, controls and audit readiness (ISMS) Own and improve the data governance framework (policies, standards, procedures) Oversee the full data lifecycle from source to end client, ensuring integrity and compliance Ensure GDPR and wider regulatory compliance (including NIS2) Own data governance tools such as Microsoft Purview and Varonis (or similar) Identify and manage data operational and regulatory risks Collaborate across IT, Legal, HR, Operations, Onboarding/Bidding and Compliance Process DSARs, SAQs and PQQs Develop reporting/metrics and provide progress updates to senior stakeholders Deliver cyber security and data governance awareness training Requirements: Strong experience maintaining ISO27001 controls, document