ISO27001 Programme Delivery Lead - 18 Month FTC

All our roles are hub based (Bristol, Glasgow or London), providing a dedicated space for collaboration, connection and teamwork. You'll also have the flexibility to work from home. This approach enables our team to collaborate, connect, and innovate both online and in physical spaces. Depending on role requirements, you will work remotely, attend virtual collaboration spaces, and visit client sites. Everyone belongs at OVO At OVO, we are on a mission to solve one of humanity's biggest challenges, the climate crisis. And we know it takes all of us to change the world. That's why we need diverse people from all abilities, gender identities, ethnicities, ages, sexual orientations, life experiences and backgrounds to join us. Teamworking for the planet Everything we do here spins around Plan Zero. So, naturally, the team you'll be joining plays a gigantic role in making that happen. Here's how: We're hiring creators, challengers and coaches. Every role puts people at the heart of our information security strategy and uses technology and operational processes to build a resilient and performant business. The Path to Zero is paved with well-informed risk and reward decisions! This role in a nutshell: As the ISO 27001 Implementation Project Manager within the Information Security Office, you will lead the end-to-end execution of our ISO 27001 certification project. You will collaborate with cross-functional teams to drive the implementation and continuous improvement of our existing Information Security Management System (ISMS), ensuring full compliance with ISO 27001 standards. Your role includes project planning and overseeing the implementation of security controls to safeguard critical assets, and the coordination of assessments to achieve certification. Strong project management skills, knowledge of information security, and experience implementing ISO 27001 in a software engineering organisation are essential. Your key outcomes will be:

• Project Manage OVO's ISO 27001:2022 programme, and facilitate the assessment and certification of OVO's Information Security Management System upgrade.
• Organise and lead a 'Centre of Excellence' for ISO 27001 leaders across business and technology departments.
• Identify opportunities for continuous improvement and share best practices.
• Manage relationships with third-party auditors and achieve ISMS audit efficiencies through common data collection and pulling from APIs and scaling common control practices.
• Lead the reporting, dashboards, and analysis of programme status and effectiveness.
• Lead delivery of initiatives to develop and configure tools to support cybersecurity governance, risk, and compliance management including ISO toolkits and job aids to enhance performance and productivity.
• Report to senior leadership on non-conformities, action plans, and remediation progress.
• Foster an environment that encourages innovation and continuous improvement in risk and compliance.
• Support OVO's privacy and security GRC team on their initiatives and in their interactions on information security risk and control matters.
  
  Proven experience in project management of ISO27001 implementation.
• Working knowledge of risk frameworks and industry best practices (e.g., ISO 27001, NIST CSF, SOC 2, Cedar policy language).
• Ability to work cross-functionally within a complex organisation and communicate with senior leadership.
• Experience with verifying policy as code and implementing repeatable and automatable processes to meet GRC requirements.
• Strong ethics, integrity, and advocacy for diversity, equity, and inclusion.
• Adaptability to shifting priorities and problem-solving capabilities.
• Proven people, portfolio, programme, and project management skills.
  
  We'll pay you between £71,240.00 - £102,584 depending on your specific skills and experience. If your expectations are a little different, have a chat with us!
We keep our pay ranges broad on purpose to give us, and you, flexibility to match your experience to our zero carbon mission. You'll be eligible for an on-target bonus of 15%. We have one OVO bonus plan that focuses on the collective performance of our people to deliver our Plan Zero goal. We also offer plenty of green benefits and progressive policies to help you feel like you belong at OVO…and there's flex pay. It's an extra 9% of your salary on top of your core pay to use as you like. You can take it as cash, add to your pension, or choose to spend it on a huge range of flex benefits. Here's a taster of what's on offer: For starters, you'll get 34 days of holiday (including bank holidays). For your health With benefits like a healthcare cash plan or private medical insurance depending on your career level, critical illness cover, life assurance, health assessments, and more For your wellbeing With gym membership, gadget, travel and cyber insurance, workplace ISA, will writing services, DNA testing, dental insurance, and more For your lifestyle With extra holiday buying, discount dining, culture cards, tech loans, and supporting your favourite charities with give-as-you-earn donations For your home Get up to £400 off any OVO Energy plan (when you pay by Direct Debit), plus personal carbon offsetting and great discounts on smart thermostats and EV chargers For your commute Nab a great deal on ultra-low emission car leasing, plus our cycle to work scheme and public transport season ticket loans Want to hear about our full range of flexible benefits and progressive people policies? Our People Team can tell you everything you need to know. For your Belonging To find better ways to support our people, we need to listen to each other's experiences and find ways to build a truly inclusive and diverse workplace. As part of this, we have 8 Belonging Networks at OVO. Led by our people, for our people - so when you join OVO, you can play a part - big or small - with any of the Networks. It's up to you.