Compliance & Information Security Manager

About the role

Agilio Software Group is seeking a Compliance & Information Security Manager to lead and enhance its compliance and security posture across a range of healthcare solutions. You will be responsible for managing certifications, audits, and governance activities to ensure ongoing compliance with key standards and regulations.

Key responsibilities

• Maintain and improve the ISMS in line with ISO 27001.
• Assist the IT team with Cyber Essentials Plus certification and ensure NHS DSP Toolkit compliance.
• Act as Data Protection Officer for GDPR, managing ICO registrations, SARs and DPIAs.
• Coordinate responses to customer security questionnaires and due‑diligence requests.
• Support incident response investigations and post‑incident reviews.
• Maintain risk registers, track remedial actions and report key risks to senior management.
• Plan and execute internal audits; manage external audits, penetration tests and vulnerability assessments.
• Administer security tools such as Eramba, Nessus, Defect Dojo, uSecure and iComply.
• Deliver security awareness programmes and manage related training content.
• Facilitate quarterly Physical Security, Risk and Information Security Steering Committee meetings.
• Report on cookie compliance and stay updated on regulatory changes.

Required profile

• Hands‑on experience with ISO 27001 and Cyber Essentials Plus certifications.
• Working knowledge of GDPR and general data‑protection principles.
• Proven experience coordinating audits and maintaining compliance documentation.
• Strong organisational skills with attention to detail and ability to manage multiple projects.

Required skills

• ISO 27001
• Cyber Essentials Plus
• GDPR
• NHS DSP Toolkit
• Eramba
• Nessus
• Defect Dojo
• uSecure
• iComply
• Excel