InforSec & Data Privacy Manager – 6-month Contract to Permanent – London (Hybrid)
We are supporting a high-growth WealthTech platform in hiring an Information Security & Data Privacy Manager on an initial 6-month contract, with a clear pathway to a permanent role.
This is an interim hire due to confidentiality, sitting directly with the COO, responsible for owning the organisation’s information security, data privacy and compliance framework across both on-premise and SaaS environments.
The role requires an individual who has operated in similar financial services or regulated technology environments, with hands-on ownership of ISO, SOC2, and audit processes.
Key Responsibilities
* Own and maintain the Information Security Management System (ISMS), ensuring ongoing compliance and maturity
* Lead ISO 27001 and SOC2 certification processes, including audits, renewals, and continuous improvement
* Define and implement information security policies, governance frameworks, and controls across the business
* Act as the primary point of contact for all security, compliance, and audit-related activities
* Partner with engineering, infrastructure, and operations teams to ensure security is embedded across both on-prem and SaaS platforms
* Manage third-party security providers and ensure alignment with internal standards
* Establish and maintain incident response, risk management, and business continuity frameworks
* Drive data privacy initiatives, ensuring compliance with GDPR and relevant regulatory requirements
* Build reporting frameworks and dashboards for leadership visibility on risk, compliance, and security posture
* Engage with senior stakeholders to influence security strategy and decision-making
Requirements
* Proven experience in an Information Security/Data Privacy Manager role within financial services, FinTech, or regulated SaaS environments
* Hands-on experience maintaining ISO 27001 and SOC2 certifications, including audit ownership
* Strong understanding of ISMS frameworks, risk management, and security governance
* Experience working across both on-premise and SaaS software environments
* Practical experience implementing security controls alongside engineering and infrastructure teams
* Strong knowledge of data privacy regulations (e.g., GDPR) and their application within technology platforms
* Experience managing third-party security vendors or SOC providers
* Ability to operate in a hands-on capacity, not purely advisory or oversight
* Strong stakeholder management, with experience working closely with senior leadership
Additional Information
* Initial 6-month contract (outside IR35) with a clear route to permanent
* Role is confidential at this stage; full company details shared upon interview request
* Hybrid working: London office, 2–3 days per week
* Immediate start