{"id":3981648,"url":"https://alion.io/job/xceptor-information-security-manager","title":"Information Security Manager","company":{"id":172537,"name":"Xceptor","domain":"xceptor.com","url":"https://alion.io/company/xceptor","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["London, United Kingdom"],"countries":["GB"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":7,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"SOC 2","optional":false},{"name":"Wiz","optional":true}],"status":"live","first_seen_at":"2026-11-09T15:41:58Z","employer_posted_date":"2026-11-09","last_verified_at":"2026-11-09T19:57:15Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"ABOUT XCEPTOR\nData is at the heart of everything we do: Xceptor has been designed around data manipulation in its broadest sense. We source data from wherever it flows. We curate, normalise, validate, repair, and enrich that data so it reaches its destination in a reliable and consistent format. Data coming out of Xceptor is data our clients can trust.\nWe are recognised as an expert in the Financial Services vertical, which strongly aligns with Business Users in Middle and Back-Office teams. We enable these users to solve their data challenges by themselves, rather than through a technology-led project.\nOur mission - we empower business users within financial institutions to build automated processes that deliver trusted data.\nOur values sit at the heart of our business, driving who we are and how we work. At Xceptor, we are:\nClient Centric; we prioritise our Clients’ experience and needs.\n\nOne Team; we actively support one another to achieve our goals.\n\nImpactful; we focus, we innovate, we make every minute matter.\n\nYour Role:\nWe’re seeking an experienced, highly independent InfoSec/GRC professional to lead information security across the business and own our ISO/IEC 27001 and SOC 2 programmes end to end.\nYou’ll be the single accountable owner for audit readiness, evidence quality, stakeholder coordination and continuous improvement, working hands-on without a supporting team.\nBeyond compliance, you’ll build an internal culture of security and compliance, manage security incidents, work with the business on vulnerability management, and advise senior leadership on risk.\nWhat You’ll Be Doing:\nSecurity leadership and culture\n Build and champion and information security and compliance culture across the business.\n Advise business and senior leadership on security risks, priorities, and decisions.\n Run periodic information security meetings and maintain governance and reporting: the audit and compliance calendar, risk register, findings tracker, KPIs/KRIs, and regular leadership updates.\n Maintain our information security policies, standards, and procedures.\nISO 27001\n Own and operate the ISMS: scope, risk management, Statement of Applicability, policies and standards, management reviews, corrective actions and continual improvement.\n Plan and manage the internal audit program.\n Lead external certification audits (Stage 1, Stage 2 and surveillance): auditor management, PBC coordination, evidence presentation and remediation closure.\nSOC 2\n Own scoping and readiness, and maintain the control matrix, control narratives, evidence catalogue and testing calendar.\n Lead Type I and Type II audits with the CPA firm, ensuring timely, complete, high-quality evidence and responses.\nControls and operations\n Build an integrated control library that minimizes duplication across ISO 27001 and SOC 2 and keep controls “operating in reality”.\n Drive cross-functional control ownership (Engineering, IT, Product, HR, Finance, Legal, Ops) through clear requirements, timelines and follow-up.\n Manage information security incidents, from response through to lessons learned.\n Work with business counterparts on vulnerability management, including prioritization and remediation.\nCustomer and supplier assurance\n Help with RFPs, security questionnaires, and due diligence packs.\n Support supplier security and evidence sharing aligned to our frameworks.\nCustomer and supplier assurance\n Help with RFPs, security questionnaires and due diligence packs.\n Support supplier security and evidence sharing aligned to our frameworks.\nWho we're looking for:\n7-10+ years in information security, GRC, risk, or audit/compliance roles.\nExperience in SaaS/technology environments.\nDemonstrable end-to-end ownership of: ISO 27001 certification (not just support), including the internal audit program and management review and SOC 2 audits (Type II strongly preferred).\nExperience managing information security incidents and advising senior stakeholders.\nProven ability to operate autonomously and drive outcomes without a team.\nA strong evidence-based mindset: you know what auditors look for and how to structure documentation and artefacts accordingly.\nISO 27001 clause and Annex A control expertise, with internal audit planning and execution.\nSOC 2 Trust Services Criteria experience (control design and operating effectiveness).\nStrong documentation skills (policies, standards, procedures, control narratives).\nExcellent stakeholder management, communication, prioritisation and programme organisation.\nSolid understanding of common security controls (IAM, change management, vulnerability management, logging, incident response, BCP/DR, vendor security).\nPreferred Experience\nISO 27001 Lead Auditor or Lead Implementer, CISSP, CISA, CRISC (or equivalent).\nExperience in modern tooling (Wiz, Drata/Vanta or similar, GRC platforms).\nDiversity & Inclusion at Xceptor\nWe believe great ideas come from everywhere - and that the best teams are made up of people with different backgrounds, experiences, and perspectives. At Xceptor, we’re committed to building a workplace where everyone feels welcome, valued, and empowered to be themselves.\nWe know that not everyone ticks every single box in a job description - and that’s okay. If you’re excited about this role and think you could make a difference, we’d love to hear from you. Your unique skills and experiences might be just what we need, even if you don’t meet every requirement.\nWe celebrate diversity and are dedicated to creating an inclusive environment for all employees - regardless of race, gender identity, sexual orientation, age, disability, religion, or background.\n Hybrid at Xceptor\nWe love the buzz of the office and the flexibility of home-so at Xceptor, you get the best of both. Our people spend 2-3 days per week in the office collaborating, brainstorming, and connecting in person. The rest is up to you. It’s all about great teamwork, balanced with the freedom to work your way.\nPlease note:\nXceptor works with clients in financial services and our offers of employment are subject to the satisfactory completion of background checks, which includes criminal record checks, and credit reference checks.\nIf you have any employment gaps exceeding three months within the last six years, we will request additional information and evidence to clarify those periods.","description_format":"text","description_chars":6356,"description_truncated":false,"requirements":{"experience_years_min":7,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Financial Software & Embedded Finance"],"lifecycle":[{"event":"open","at":"2026-11-09T19:57:15Z"}],"visa":[{"country":"GB","licensed_sponsor":true,"adverts_offering_sponsorship_24m":0,"sanctioned_now":false,"evidence":"Licensed UK visa sponsor (Skilled Worker)","filings_12m":null,"filings_prev_12m":null,"green_card_filings_12m":null,"median_offered_wage_usd":null,"route":"Skilled Worker","cap_exempt":false,"checked_at":"2026-11-09T07:32:21+00:00","sources":["UK Home Office: register of licensed sponsors (workers)"],"filings_for_role_12m":0}],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":40,"reasons":["conf:3","win:early"],"computed_at":"2026-11-09T23:25:43Z"},"pay":null,"html_url":"https://alion.io/job/xceptor-information-security-manager","json_url":"https://alion.io/job/xceptor-information-security-manager.json","meta":{"generated_at":"2026-11-09T23:25:43Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":12983,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-10T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":172537},"rest":"https://alion.io/mcp/rest/get_company?id=172537"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fxceptor-information-security-manager"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fxceptor-information-security-manager"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fxceptor-information-security-manager"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/xceptor-information-security-manager\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fxceptor-information-security-manager"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3981648}},{"tool":"search_jobs","arguments":{"company":"xceptor.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3981648},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}