Information Security Specialist

Remote — UK or Ireland | Life Sciences / MedTech Scale-up

About the Role

Our client is a fast-growing life sciences technology company whose software supports cancer diagnostics and drug development — security work with real-world consequence. They're hiring a hands-on Information Security Specialist to own the day-to-day running of their ISO 27001 ISMS and drive the shift from reactive compliance to always-on, business-embedded security.

This is an implementation role, not an advisory one. They need someone who fixes things, not someone who flags issues and hands them off.

What You'll Do

• Own the day-to-day running of the ISO 27001 ISMS across multiple business units
• Get the organisation audit-ready as a steady state — internal and external audits
• Drive corrective actions (CAPAs) to full closure, not just logged status
• Build and maintain a reliable evidence pipeline with clear ownership
• Maintain a live, decision-oriented risk register with real owners and mitigation plans
• Define evidence expectations for technical controls (SIEM, EDR, MFA, RBAC, vulnerability management) — and verify them yourself rather than relying on assertions
• Support vendor and customer security due diligence
• Build security awareness training that changes behaviour, not just completion rates
• First 3–6 months: revamp incident management, automate evidence collection, and support a global VPN roll-out

What You'll Bring

Required:

• 5+ years in Information Security / ISMS operations, ideally in med tech, clinical or life sciences
• Hands-on ISO 27001 experience — implementation through to external audit (certification body and client-side)
• A track record of measurable impact: reduced vulnerabilities, time saved through automation, processes scaled — not just duties listed
• Cloud security fundamentals
• Strong stakeholder management and documentation skills

Nice to have:

• MDM services, IDP tooling, Google Workspace
• Vulnerability management tools, SIEM
• AWS, GitHub or GitLab
• SOC2, CIS, ISO 27701, CE+, CISSP or equivalent
• Compliance monitoring tooling (e.g. Vanta, Secureframe)
• Scale-up experience over large-enterprise — comfortable with autonomy, ambiguity and minimal sign-off layers

Logistics

• Fully remote, based full-time in the UK or Ireland
• Right to work in the UK and Ireland required — visa sponsorship is not available
• Occasional travel (roughly 10% of time) for site visits and relationship-building

Why Apply

• Work with tangible, mission-driven impact on patient outcomes
• Genuine ownership of a security programme you can shape from the ground up
• Lean, high-trust, high-autonomy environment — no six layers of sign-off
• A team actively exploring how to use AI and automation responsibly, not just flagging the risks
• Competitive salary with performance-based increments

Reperio Human Capital acts as an Employment Agency and an Employment Business.