Information Security & Compliance Manager - #2179635

We’re hiring: Information Security & Compliance Manager

FORM is looking for a hands-on Information Security & Compliance Manager to run and improve our established, ISO 27001-certified security programme as the business grows and develops its AI-enabled products.

What you’ll do

• Keep our ISMS, policies, risk register and audit evidence up to date.
• Coordinate audits and track findings through to completion.
• Support customer security reviews, questionnaires and DPIAs.
• Assess suppliers and sub-processors, including AI model providers.
• Coordinate vulnerability management, phishing simulations and security incidents.
• Help product and engineering teams consider security and information governance as features develop.
• Deliver security awareness training and manage the rollout and administration of security tools.

What we’re looking for

• Hands-on experience operating an ISO 27001 ISMS, including risk management and audit preparation.
• Experience with supplier security reviews and customer due diligence.
• Working knowledge of UK GDPR and experience carrying out DPIAs.
• A self-directed, practical approach to learning and managing tools.
• The ability to explain security clearly and make proportionate risk decisions with colleagues across the business.

An ISO 27001 Lead Implementer or Lead Auditor qualification, experience with AI governance, or a background in a SaaS scale-up would be a bonus.

This is a hands-on individual contributor role. Technical remediation sits with engineering, and specialist privacy and CISO advice is provided by retained partners.

There’s scope for the role to grow towards senior security leadership as the business develops.

For the full role details, please get in touch.