Sorry, applications for this particular Job have now closed.A leading fund manager with global interests is seeking a very experienced IT Auditor to join an ...View job & applyLocation: FrankfurtSalary: 120,000 + BenefitsJob type: PermanentSector: Asset Management & Funds, BankingA fast-growing investment firm based in Frankfurt is looking for a motivated IT Governance & ...View job & applyLocation: FrankfurtSalary: 145000 + BenefitsJob type: PermanentSector: Asset Management & Funds, BankingA growing investment firm headquartered in Frankfurt is looking to appoint a senior IT Governance...Head of Information Security required for online retail business. The role will initially be focused on ISO27001 & ISO9001 recertifications.ResponsibilitiesLead on information security strategy and implementation of security roadmapDevelop security KPIs and track their progressAdvise senior management on risk levels and any changes impacting security posture, including emerging threatsCreate, maintain, and implement information security policiesContinuously validate the firm against policies and procedures to ensure compliance against ISO 27001, ISO 9001, Cyber Essentials+, and GDPRManage and continuously improve of the firms Information Security Management SystemOversee the information security training and awareness programLead on internal and external audits and track audit findings through to mitigationIdentify and communicate emerging security threats with relevant stakeholdersProvide security due diligence in procurement processes and oversee continuous supplier assuranceManage security incidents and coordinate incident response processesSelect and implement GRC controls and assisting in selection and implementation of information security technologiesIdentify security requirements specific to an information technology (IT) system in all phases of the system life cycleDevelop new, or enhance current, security procedures to reduce or eliminate potential threatsEnsure that cybersecurity requirements are Embedded into new programs of workProviding management and mentorship to security teams and supporting staffCreate and then lead the Security Operations Centre (SOC), ensuring Real Time monitoring and incident response.Drive security awareness training and governance, risk, and compliance (GRC) initiatives.Creation and presentation of reporting to senior stakeholders, highlighting threats, compliance gaps, and mitigation progress.Conduct risk assessments, maintain risk registers, and design risk treatment plans.Support oversight of vulnerability tooling & processes, assess risk and prioritise remediation.Lead internal/external audits (ISO 27001 and ISO 9001) and ensure compliance with regulations (GDPR).Support wider IT project requirements through management of defined gates, provision of guidance and assessment of controls.As an ideal candidate, you will have a proven track record of bringing organisations through ISO27001 & ISO 9001 accreditations. ISO27001 lead implementer or auditor qualifications are essential.We seek individuals from a diverse talent pool and encourage applicants from underrepresented groups to apply to our vacancies. Our commitment to fair recruitment processes means that we welcome applicants from all backgrounds, regardless of their lived experience or personal characteristics. We also invite applicants who meet most of the listed requirements, even if not all, to apply. If you require any adjustments to the application process, please let us know.Barclay Simpson acts as an Employment Agency for permanent positions and an Employment Business for temporary/contract engagements. #J-18808-Ljbffr