Information Security Specialist

Our client is a fast-growing life sciences technology company whose software supports cancer diagnostics and drug development - security work with real-world consequence. They're hiring a hands-on Information Security Specialist to own the day-to-day running of their ISO 27001 ISMS and drive the shift from reactive compliance to always-on, business-embedded security.

This is an implementation role, not an advisory one. They need someone who fixes things, not someone who flags issues and hands them off.

* Own the day-to-day running of the ISO 27001 ISMS across multiple business units * Get the organisation audit-ready as a steady state - internal and external audits * Drive corrective actions (CAPAs) to full closure, not just logged status * Build and maintain a reliable evidence pipeline with clear ownership * Maintain a live, decision-oriented risk register with real owners and mitigation plans * Define evidence expectations for technical controls (SIEM, EDR, MFA, RBAC, vulnerability management) - and verify them yourself rather than relying on assertions * Support vendor and customer security due diligence * Build security awareness training that changes behaviour, not just completion rates * First 3-6 months: revamp incident management, automate evidence collection, and support a global VPN roll-out

Information Security, ISO 27001, AI, Automation

Information Security Specialist

Remote - UK or Ireland | Life Sciences / MedTech Scale-up

Required:

* 5+ years in Information Security / ISMS operations, ideally in med tech, clinical or life sciences * Hands-on ISO 27001 experience - implementation through to external audit (certification body and client-side) * A track record of measurable impact: reduced vulnerabilities, time saved through automation, processes scaled - not just duties listed * Cloud security fundamentals * Strong stakeholder management and documentation skills

* MDM services, IDP tooling, Google Workspace * Vulnerability management tools, SIEM * AWS, GitHub or GitLab * SOC2, CIS, ISO 27701, CE+, CISSP or equivalent * Compliance monitoring tooling (e.g. Vanta, Secureframe) * Scale-up experience over large-enterprise - comfortable with autonomy, ambiguity and minimal sign-off layers