IS, Compliance & Data Protection Mgr.

We’re hiring: Fractional Information Security, Compliance & Data Protection Manager

LYNQ is looking for an experienced Information Security and Compliance professional to join us on a fractional contractor basis and take ownership of our ongoing security governance and compliance programme.

This is a senior, hands-on governance and assurance role not a technical implementation position.

We are looking for someone who can independently manage and drive our ISMS and security compliance activities, ensuring that we remain compliant, audit-ready and continually improving throughout the year.

​

The role will include responsibility for:

• Ownership and continual improvement of our ISMS
• ISO 27001, ISO 27017 and ISO 27018 compliance and certification activities
• Cyber Essentials and Cyber Essentials Plus
• Internal audit planning and delivery
• Management Reviews and ISMS Committee activities
• Information Security Risk Register and risk treatment
• Statement of Applicability and control governance
• Policies, procedures and security governance documentation
• Non-conformities, corrective actions and continual improvement
• Security awareness and policy adherence
• Supplier and third-party security assurance
• Data protection governance and DPO responsibilities
• Supporting customer security and compliance requirements
• Working with technical control owners to ensure appropriate controls are implemented and evidenced

You will not be expected to implement technical controls yourself. However, you must have sufficient technical security knowledge to understand the controls, challenge where necessary and assess whether appropriate evidence demonstrates that requirements are being met.

​

Experience we're looking for

Strong practical experience managing ISO 27001 within a certified organisation is essential. We are particularly interested in candidates with experience across:

• ISO 27001 / 27017 / 27018
• Cyber Essentials / Cyber Essentials Plus
• UK GDPR and Data Protection
• NIST frameworks
• SOC 2

Experience or knowledge of CMMC, NIST SP 800-171, CUI and ITAR would be highly desirable.

Experience within a B2B SaaS, cloud or software organisation would also be a significant advantage.

Qualifications such as ISO 27001 Lead Auditor / Lead Implementer, CISM, CISSP or CISA are welcome, but we're particularly interested in real-world experience of personally owning and operating an ISMS.

​

The engagement

Independent contractor

Remote

Approximately 2–3 days per month, with flexibility around audit and certification periods

Competitive day rate, dependent on experience

We are looking for someone who will genuinely own this function proactively managing the compliance calendar, driving actions, challenging control owners and ensuring security governance doesn't become something that only receives attention immediately before an audit.

We will begin interviewing from 1 September 2026. If this sounds like you, or you know someone who would be a great fit, we'd love to hear from you.

​

How to Apply

Note: This is a syndicated job post. Fractional Jobs found it on the web, but we are not working with the client directly, so we don't have control over or knowledge of the application process. To apply, click on the "View Application" button and follow the application's instructions. Let us know how it goes!