Information Security Management Systems Implementation Consultant (Contract – Outside IR35)
Location : Remote (HQ : Teesside)
Contract Length : 6 months
NRG is delighted to partner with a growing, mid-sized organisation on an exciting new opportunity for an experienced ISMS Implementation Specialist to lead the delivery of a full ISO 27001-aligned Information Security Management System (ISMS).
You’ll be the hands-on lead responsible for designing and implementing an operational, production-ready ISMS, with the potential for certification in a future project phase. You’ll work closely with leadership, IT, and operations to bring structure, compliance, and scalability to their maturing security posture.
What You’ll Be Doing
ISMS Framework & Governance
- Establish a fully compliant ISMS framework aligned to ISO 27001 standards
- Build and formalise the ISMS Governance Council and internal Information Security Team structures
- Develop all core policies, procedures, and controls across the business
- Implement risk assessment processes and treatment plans
- Launch internal audit and management review programmes
Security Configuration & Technical Delivery
Configure Microsoft 365 security settings (DLP, conditional access, info protection etc.)Review and enhance controls for a custom CRM application on AWS (OWASP-compliant)Integrate Vanta (existing compliance monitoring platform) with the ISMSDirectly implement security controls where possible or brief / manage the ITSM providerDocument all technical processes and configurations for long-term sustainabilityOperational Readiness & Handover
Ensure the ISMS is fully operational and self-sustainingSupport training and upskilling of governance council and ISMS rolesEstablish competency frameworks, documentation packs, and evidence collection systemsFormalise key business processes (incident response, risk, continuous improvement)What We’re Looking For
Proven track record implementing ISO 27001-aligned ISMS in similar-sized organisations (50–200 employees).Hands-on experience configuring Microsoft 365 security tools (DLP, CA, compliance centre, etc.).Strong understanding of governance frameworks, especially involving business-led councils and stakeholder engagement.Experience working with regulators such as FCA or ICO across diverse technical environments.Confident leading ISMS delivery independently, with structured project plans and clear documentation.Familiar with Vanta or similar compliance automation platforms (Drata, Tugboat Logic, etc.).ISO 27001 Lead Implementer certification preferred but not essential.Why Apply?
Autonomy : Full ownership of ISMS Phase 1 - from design to deliveryFlexibility : Fully remote contract role, with support from a responsive leadership teamImpact : Shape the organisation’s long-term information security maturityTools : Leverage a modern tech stack (M365, AWS, Vanta, cloud SaaS)If this role sounds of interest, click ‘apply now’ and a member of our team will be in touch.
NRG is an equal opportunities employer committed to promoting a diverse and inclusive workplace. We oppose all forms of unlawful or unfair discrimination on the grounds of any protected characteristic. Our aim is to create an environment that encourages diversity, builds on individual differences, and responds equitably to the needs of all. We proactively take steps to fulfil our legal obligations, remove barriers, monitor for fairness, reflect the communities we serve, and enforce a zero-tolerance policy for breaches of our Equality and Diversity policy.
#J-18808-Ljbffr