{"id":1623607,"url":"https://alion.io/job/linnworks-information-security-project-manager","title":"Information Security Project Manager","company":{"id":1810070,"name":"Linnworks","domain":"linnworks.com","url":"https://alion.io/company/linnworks","size_band":"1-10","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Personio","truth_index":null},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":[],"countries":[],"hiring_countries":["US","GB","EE"],"hiring_countries_total":3,"salary":null,"salary_estimate":{"min_usd":72000,"max_usd":155000,"period":"year","method":"global_role_seniority_cell","sample_n":714},"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"HIPAA","optional":false},{"name":"ISO 27001","optional":false}],"status":"live","first_seen_at":"2026-07-13T15:43:55Z","employer_posted_date":"2026-07-13","last_verified_at":"2026-10-17T19:16:58Z","board_verified":true,"closed_at":null,"days_open":96,"trust":{"level":"stale","repost_count":0,"flags":["stale"],"days_open":95},"description":"Your Mission\nJob Title: Information Security Project Manager\nReports to: Director of Technical Operations\nLocation: UK / Estonia / US (remote-friendly within these regions)\nRole purpose\nThe Information Security Project Manager is responsible for coordinating and driving the company’s information security activities in a pragmatic, commercially aware way.\nThis role exists to manage security-related projects, audits, and customer security interactions so that we stay compliant and credible without blocking sensible business decisions or over-engineering controls.\nScope and context\nThis role sits within the technology function and partners closely with Technical Operations, Engineering, Product, Legal, and Sales.\nThe focus is on governance, coordination, and communication, not on dictating policy in isolation or acting as the final decision-maker on security matters.\nFinal risk and tooling decisions sit with the Director of Technical Operations and the broader leadership team; the Information Security Project Manager’s job is to provide clear input, well-reasoned recommendations, and organised execution.\nWe are a growing SaaS business without PCI, PHI, or highly sensitive PII in scope, and we are not subject to HIPAA or classified/secret information regime - our security approach should be proportionate: strong, credible, and well-documented, but not theatrical or unnecessarily restrictive.\nKey responsibilities\nISO 27001 and internal audits\nPlan, coordinate, and execute internal audits and control reviews against ISO 27001 (and related frameworks where relevant).\n\nMaintain audit schedules, evidence repositories, and action logs so that we are consistently “audit ready” rather than scrambling before assessments.\n\nWork with control owners across the business to ensure that required processes are in place, understood, and operating in a pragmatic way.\n\nTrack findings and remediation actions, ensuring owners are clear on what needs to be done and by when, and following up to completion.\n\nSupport external ISO 27001 surveillance and recertification audits, including planning, evidence collation, and managing auditor queries.\n\nSecurity projects and initiatives\nCoordinate discrete security improvement projects (for example, rolling out new security tooling, tightening access controls, or updating key policies).\n\nBreak down security initiatives into clear tasks, owners, and timelines, and keep stakeholders informed on progress and risks.\n\nWork with Technical Operations and Engineering to ensure technical changes are understood, documented, and reflected in our security posture.\n\nHelp prioritise security work by articulating risk, impact, and effort, while understanding the wider commercial and delivery context.\n\nCustomer security, RFPs and RFQs\nPartner with Sales, Pre-Sales, and Customer Success to respond to customer security questionnaires, RFPs, RFQs, and due diligence requests.\n\nMaintain and continuously improve a central library of standard security responses and artefacts (for example, summaries of our controls, certifications, and processes).\n\nCoordinate input from Technical Operations, Engineering, and Legal where deeper technical or contractual responses are required.\n\nAttend customer calls when needed to explain our security posture in clear, non-alarmist language and build confidence in our approach.\n\nSecurity information and communication\nDevelop and maintain a clear, concise view of our security posture that can be communicated internally and to customers (for example, how we handle data, access, monitoring, and incident response at a high level).\n\nEnsure that key facts (such as use of encryption at rest and in transit, SSO capabilities, backup approaches, and incident processes) are understood and kept up to date, even if technical details are owned by others.\n\nTranslate technical explanations from engineers into language suitable for non-technical audiences, including customers and internal stakeholders.\n\nHelp ensure that security-related messages are proportionate, avoiding both complacency and unnecessary drama.\n\nPolicies, standards, and pragmatic governance\nMaintain a focused, manageable set of security policies and procedures that reflect how we actually operate.\n\nWork with policy owners to keep documents current, usable, and aligned to ISO 27001 and customer expectations, avoiding policy sprawl and unnecessary complexity.\n\nCoordinate periodic reviews of key policies and standards, ensuring changes are communicated and understood.\n\nProvide recommendations to the Director of Technical Operations on improvements to policies, controls, or tooling, with clear reasoning and trade-offs.\n\nWhat this role is not\nThis is not a “head of security” or ultimate decision-maker role; final go/no-go and tooling decisions sit with the Director of Technical Operations and leadership.\n\nThis is not a role for writing endless policies or blocking change; it is about enabling sensible decisions with good information and structured follow-through.\n\nThis is not a hands-on security engineering or development role, though you will need enough technical understanding to ask good questions and interpret answers.\n\nThis is not an internal “police” function; success is based on collaboration, influence, and clarity, not on authority.\n\nWhat You'll Bring To The Role\nWe’re looking for someone who brings most of the following:\n3-5 years of experience in information security, compliance, risk, or IT audit within a SaaS or technology environment.\n\nHands-on experience with ISO 27001 (or similar frameworks), including audits, evidence collection, and remediation tracking.\n\nSolid project management skills - planning, tracking progress, managing stakeholders, and communicating clearly.\n\nWorking knowledge of core security concepts such as encryption (at rest/in transit), access control, SSO/identity providers, backup and recovery, logging, and incident response - enough to discuss confidently and know when to bring in a specialist.\n\nComfortable engaging directly with customers and auditors, answering questions calmly and credibly.\n\nStrong writing skills for policies, reports, and customer communications, paired with clear verbal communication across technical and non-technical audiences.\n\nPersonal qualities\nPragmatic and commercially aware: able to distinguish between theoretical risk and real-world impact.\n\nCollaborative, working with teams to find workable solutions rather than simply saying “no”.\n\nOrganised and methodical, keeping track of multiple audits, projects, and requests without dropping details.\n\nCalm and credible under pressure, especially during audits, customer escalations, or security-related incidents.\n\nComfortable asking questions, challenging assumptions, and highlighting risk while still respecting broader business priorities.\n\nWhy this role matters\nDone well, this role gives the business confidence that our security posture is robust, evidenced, and well-articulated, without turning security into a blocker for growth.\nIt ensures we meet our obligations to customers and auditors, support sales with clear and honest answers, and make security improvements in a deliberate, organised, and commercially sensible way.\nWhy us?\nPerks & Benefits\nRemote & flexible working - with hybrid options in London or Chichester\nFantastic team culture based on trust and belonging.\nLaptop & home office budget - 500 EUR to set up your ideal workspace.\nPrivate Medical Insurance with Aviva, including Dental & Optical.\nGroup Life Insurance & Yulife Wellbeing & Rewards.\nMental well-being support - Access therapy, mental health sessions, and yoga through a free premium subscription to Headspace.\n EAP confidential benefit - 24/7 access to compassionate guidance & expert advice\n25 days holiday + bank holidays\nTraining, support, and personal development","description_format":"text","description_chars":7855,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":true,"languages":[]},"benefits":["Flexible schedule","Health insurance","Home office","Life insurance"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"},{"name":"United Kingdom","iso":"GB","kind":"country"},{"name":"Estonia","iso":"EE","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Commerce","Marketplaces"],"lifecycle":[{"event":"open","at":"2026-10-01T20:54:48Z"}],"visa":[],"liveness":{"score":9,"band":"cold","label":"Long shot","p_open":1,"p_active":0.337,"p_room":0.28,"age_days":95,"expected_fill_days":28,"reasons":["conf:3","win:tail","crowd:"],"computed_at":"2026-10-17T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/linnworks-information-security-project-manager","json_url":"https://alion.io/job/linnworks-information-security-project-manager.json","meta":{"generated_at":"2026-10-17T20:54:59Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":5221,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-18T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1810070},"rest":"https://alion.io/mcp/rest/get_company?id=1810070"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Flinnworks-information-security-project-manager"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Flinnworks-information-security-project-manager"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Flinnworks-information-security-project-manager"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/linnworks-information-security-project-manager\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Flinnworks-information-security-project-manager"}]}