Information Security Manager - GRC

About the role Maisa builds AI for the enterprise, with a focus on regulated industries such as banking. Our clients expect proof that we protect their data and processes, and this role provides it. We are looking for an Information Security Manager in our Governance, Risk and Compliance function to own and continuously improve Maisa’s security compliance program.

Your first priority is leading SOC 2 Type II and ISO/IEC 27001:2022 through audit and certification, then keeping both running. Further frameworks will follow as client demand grows. Beyond certification, the role covers the wider GRC remit: policy and governance, security risk, third-party risk, and client security reviews.

This is a hands-on role for someone who carries audits themselves and sees problems through to closure. The objective is not simply to pass audits, but to run a sustainable compliance program that reflects how the company actually operates and can scale with the business.

Lead our SOC 2 Type II and ISO 27001 programs from readiness to certification, then keep them running. Own each audit: scope, evidence, auditors, the certification body, surveillance and renewal. Shape the certification roadmap as client demand grows, for example ISO/IEC 42001 for AI governance, or other requirements from regulated clients.

Plan the audits, budget and tooling for each addition. Run the Information Security Management System (ISMS) day to day: policies, control ownership, the internal audit prog