Group ISMS Manager

Helping over ten million people around the world manage their savings, retirement plans and life insurance requires a lot of people behind the scenes.  It’s up to us in L&G Group functions – which includes our tech and digital teams, Group Finance, HR, Risk and Corporate Affairs – to provide the essential support services that all areas of the business need, here in the UK and overseas. Simply put, we enable everyone at Legal & General to do what they do best. That means we’re helping to improve our customers’ lives and contributing to the success of the business every day.  

We're recruiting for a Group ISMS Manager to join us in either Hove or London!

You'll play a key role in maintaining the L&G group Information Security Management System (ISMS), in line with the requirements of the ISO 27001:2022 standard and any iterations thereafter. This is a group wide role encompassing all L&G entities that maintain ISO 27001 accreditation within the scope of the group certification

What you'll be doing:

• Supporting development of the assurance approach for maintaining group information security policies and standards, in line with ISO 27001:2022 and any iterations thereafter
• Authoring and maturing the Group ISMS Operations Manual and Statement of Applicability and maintaining both document index and the document approval framework 
• Supporting the development of an internal audit approach and scheduling (including planning and leading site audits and arranging management review meetings) with all stakeholders and implementing internal audits, to meet the requirements of the external audit (full accreditation or surveillance) 
• Charing the Management Review Meetings (MRMs) and maintaining registers of non-conformance and risk and a documented list of the business’ contextual issues 
• Working with the 1.5 LoD technology controls team to ensure the requirements, including evidence of control operation are met and can be evidenced, through operation of the control assurance function
• Supporting the implementation of appropriate governance, reporting and escalation of changes impacting customers to ensure key checkpoints are met in line with stakeholder and business requirements
• Ensuring any system or process changes that impact customer journeys have been reviewed by business stakeholders to determine the impact of the changes on the delivery of customer outcomes

Who we're looking for:

• Previous experience managing an Information Security Management System (ISMS), in line with ISO 27001 requirements.
• Excellent understanding and practice of IT architecture, infrastructure and information security
• Experience in managing an ISMS and maintaining ISO 27001 certification in a complex multi-faceted business
• Experience in Technology Risk Management in 1st, 2nd and 3rd line
• Practical delivery of successful, collaborative and risk mitigation solutions

Whatever your role, we reward performance and behaviour with a package that looks after all the things that are important to you. Here are some of the benefits we offer: 

• The opportunity to participate in our annual, performance-related bonus plan and valuable share schemes  
• Generous pension contribution  
• Life assurance   
• Private medical insurance (permanent employees only) 
• At least 25 days holiday, plus public holidays, 26 days after 2 years’ service. There’s also the option to buy and sell holiday 
• Competitive family leave 
• Participate in our electric car scheme, which offers employees the option to hire a brand-new electric car through tax efficient salary sacrifice 
• There are the many discounts we offer – both for our own products and at a range of high street stores and online   
• In 2023, some of our workspaces were redesigned. Our offices are great spaces to connect and collaborate and have your wellbeing at the heart

Legal & General is a leading financial services organisation, named Britain’s Most Admired Company in 2023, for the second year running. Rated top in our sector and top for inspirational leadership, we have a strong heritage and an exciting future.  

We’re one of the world's largest asset managers, homebuilders, pension providers and insurers. Connecting to form a unique business model which drives value for our customers and society. And enabling our people to create impact through work that is meaningful and valued.  

If you join us, you’ll be part of a welcoming, inclusive culture, with opportunities to collaborate with people of diverse backgrounds, views, and experiences. Guided by leaders with integrity who care about your future and wellbeing. Empowered through initiatives which support people to develop their careers and excel.  

We strive to be open, mindful, and inclusive, so are always willing to discussing flexible working arrangements and reasonable accommodations for candidates with specific needs. It doesn’t matter if you don’t meet every single criterion in this advert. Instead, think about what you excel at and what else you can bring in terms of strengths, potential and connection to our purpose. 

If you’re open to find out more, we'd love to hear from you.