IT Security & Compliance Manager

Location: Staines-upon-Thames, United Kingdom (hybrid), with occasional travel to Newcastle and Edinburgh.

Salary: £40,000–£45,000 per year.

Company

hirify.global is a digital consultancy delivering technology solutions and digital services for UK government departments and the NHS.

What you will do

• Maintain ISO 27001, ISO 9001, ISO 14001 and ISO 20000-1 certifications, including internal audits, management reviews and external audits.
• Maintain Cyber Essentials and Cyber Essentials Plus certification, manage annual ITHC and penetration testing, and close identified findings.
• Track ICO, UK GDPR, WEEE, e-waste, contractual and legal compliance obligations.
• Run gap assessments and risk reviews across systems, devices, SaaS and suppliers, maintaining the risk register and corrective actions.
• Manage endpoint protection, patching, MFA, access reviews, incident response and the laptop estate from purchase through disposal.
• Deliver security inductions and phishing simulations, answer client security questionnaires, test the business continuity and disaster recovery plan, and provide monthly leadership reporting.

Requirements

• At least two years of experience in an IT security or IT compliance role where you were the main person responsible.
• Hands-on experience with ISO 27001 audits and Cyber Essentials and Cyber Essentials Plus.
• Practical administration experience with Google Workspace or Microsoft 365, an MDM platform such as Intune or Jamf, and endpoint protection.
• Ability to write clear policies and explain them to non-technical colleagues.
• Eligibility for Security Check (SC) clearance.

Nice to have

• ISO 27001, ISO 9001, ISO 14001 or ISO 20000-1 Lead Implementer or Lead Auditor qualifications, CISMP or Security+.
• Knowledge of UK public-sector security expectations, including NCSC guidance, ITHC and departmental supplier assurance.
• Knowledge of UK GDPR and ICO obligations, SOC 2 or supplier risk management.
• Knowledge of Home Office sponsor-licence compliance from the IT and asset management perspective.

Culture & Benefits

• Hybrid working in Staines-upon-Thames with occasional travel to Newcastle and Edinburgh.
• Inclusive working environment with support for flexible working arrangements.
• Reasonable adjustments are provided throughout recruitment and employment.
• Permanent employment in a consultancy delivering public-sector digital services.