Information Security Compliance Lead
Skills
ArrangingCSFContinuous ImprovementData Protection ActEasily AdaptableHealthcareISO 27001
What the job involves
The main requirements, responsibilities and hiring steps.
Requirements
- Strong knowledge of NHS DSPT Cyber Essentials Plus ISO 27001 and NIST CSF
- Previous experience in information security compliance or assurance within a large or regulated organisation
- Experience leading NHS DSPT submissions including timelines and stakeholder evidence gathering
- Experience leading ISO 27001 or Cyber Essentials Plus certification activity including auditor coordination
- Experience leading NIST CSF maturity assessments and reporting
- Understanding of UK data protection obligations including Data Protection Act 2018 and UK GDPR
- Ability to conduct compliance assessments risk reviews and supplier and project assurance
- Strong communication and influencing skills with technical and non-technical stakeholders
- Ability to assess departments and system owners against framework requirements and report findings
- Ability to prepare audit ready evidence and support compliance reporting
- Ability to embed compliance requirements into projects and change programmes
- Ability to present compliance assurance and risk reporting for Executive Risk and Audit forums and coordinate audit responses to closure
Nice to have
- Detail oriented
- Highly organised
- Influential
- Analytical
- Collaborative
Day to day
- Lead the organisation’s information security compliance programme with a strong focus on assurance, governance and continual improvement.
- Coordinate evidence collection, maturity assessments and audit-readiness activities across DSPT, ISO 27001, Cyber Essentials Plus and NIST CSF.
- Produce clear compliance, assurance and risk reporting for senior governance forums while working closely with stakeholders to close gaps and strengthen controls.