ISO 27001 Internal Audit Manager

Reading, England, United Kingdom

1/9/2025

About Us

We’re building Tomorrow’s Connections Today, bringing people together through the power of our technology.

We are a world leader in converged broadband, video and mobile communications and an active investor in cutting-edge infrastructure, content and technology ventures.

With our investments in fibre-based and 5G networks we play a vital role in society, currently providing over 85 million fixed and mobile connections and rolling out the next generation of products and services, while readying our networks for 10 Gbps and beyond.

We’re creating national champions, combining the best broadband and mobile networks under brands such as Virgin Media-02 in the UK, VodafoneZiggo in The Netherlands, Telenet in Belgium, Virgin Media in Ireland and UPC in Slovakia.

Liberty Global Ventures, our global investment arm, has a portfolio of more than 75 companies and funds across content, technology and infrastructure, including strategic stakes in ITV, Univision, Plume, Lionsgate and the Formula E racing series.

Our scale enables us to transfer knowledge and expertise across our operations and investments, creating a dynamic family of brands united in the pursuit of innovation and excellence.

And we’re prioritising diversity, equity and inclusion in our workplace and communities, while reducing our impact on the environment. We are using technology as a force for good; for our people, our partners and the planet.

Job Purpose

You will be planning and conducting internal audits of the Information Security Management System (ISMS) across Liberty Global to support and maintain Liberty Global’s ISO 27001 certification. This will require audit effort across the entire business, covering all aspects of the ISMS and Annex Controls; involving business wide engagement across all management levels.

This role is wholly responsible for undertaking impartial, fair, evidence-based audits aligned with the ISO 27001 standard series, as well as against the requirements of the internal ISMS and will work closely relevant implementation and compliance teams.

You will plan, own, maintain and continuously improve our Internal Audit (IA) programme; and be accountable for the delivery of that programme.

You will take ownership of all associated standards, plans, audit templates and formal documentation associated with the requirements. Undertaking the audit of clauses, controls, processes, operating procedures, physical sites, and teams across the whole of LG Central organisation. You will use their professional expertise to determine whether controls are compliant, and resolve appropriate findings where they are not.

They will produce and distribute Audit Reports including recommendations and non-conformance findings, to a standard required to meet the organizational needs of ISO 27001 Clause 9.2.

As well as recording and managing all recommendations and non-conformances you will provide metrics and measurements that accurately represent the current security status and support governance reporting. Additionally take ownership of and produce relevant reporting for security and business leadership.

The role will need to develop an understanding of relevant regulation, legislation, international standards and industry best practice for security in line with LG’s information security objectives.

As well as ensuring the business is acting in compliance with ISO27001 series standards, you will also assess conformance to internal Security Policies, Standards and Controls, plus relevant external Legal and Regulatory requirements.

The individual will also be responsible for presenting our programme to the External Auditor; and providing external audit support as required.

Key Accountabilities

• Undertake Internal Audits across the full scope of certification
• Provide assurance around control efficiency and application across the business.
• Use a combination of interviews, evidence review, sampling and other appropriate audit techniques to provide confidence in their conclusions.
• Definition, ownership and delivery of an annual and 3-year IA programme
• Maintenance of the LG’s ISO 27001 Internal Audit System and ownership of relevant documentation and tools as advised.
• Scope and Carry out audits in accordance with the IA Schedule and utilise a standard ISO 27001 IA approach.
• Ensure delivery is aligned to relevant ISO standards; including ISO 27007 and ISO 19011.
• Production of metrics, reports and KPIs over the audit function.
• Management of IA workload; and escalation where further support is required.
• Present clear, accurate and actionable recommendations and findings.
• Provide direction to the business to support the continuous improvement of security and the ISMS and collaborate with the relevant teams to understand organisation changes and effects on security and processes.
• Deliver clear reports, accurately outlining the internal audit programme.
• Undertake audits across LG Physical locations (pan-European)
• Act in good faith, impartially and fair.
• Highlight trends in compliance, control efficiency and corrective actions.
• Delivery of reporting covering IA output and delivery of the IA plans and IA system
• Maintain a flexible approach to assisting the wider team.
  
  

Key Interfaces For The Role Are

• Working relationship with the ISO 27001 implementation and compliance teams
• Talking to all areas of the business to assess their compliance to security requirements.
• Working with Oversight and Assurance Director to report against assurance and compliance
• Collaborating with other assurance specialists for audit support where required
• Training of other internal auditors, where required
• Liaising with external bodies and assessors
  
  

We Tend To Look For People With

• A deep understanding of ISO 27000 series standards and specific experience of ISO 27001 Lead Auditing
• Excellent documentation and report writing skills
• Effective verbal communicator to ensure engagement across the organisation.
• The ability to manage and prioritise workload.
• Continuous improvement and growth mindset
• Customer and stakeholder focussed with attention to detail and be able to meet multiple competing deadlines.
• Ability to adapt approach and content to audiences across operational, security, and management domains
  
  

Desirable Skills & Abilities

• Shown experience of accountability for ISO Internal Audit
• Demonstrable experience of undertaking ISO Auditing in a global organisation
• Shown experience in an information security role in a large commercial organisation.
• Knowledge and experience of working internationally
• Experience of a large, sophisticated, global matrix organisation
  
  

Preferred Education / Qualifications

• Formal ISO Lead Auditor Training / Certification
• Recognised Information Security/auditing certification (CISM, CISA)
• Knowledge or experience of the telecoms industry
  
  

Benefits

• Competitive salary + Eligibility for our Bonus Plan
• 25 days annual leave with the option to purchase 5 more
• 3 Days of Volunteering Time Off
• Free access to LinkedIn Learning & Coursera to continue to develop and grow your career with us
• Free premium subscription to Calm
• Company Laptop, Mobile and Phone Subscription
• Company Pension Contributions
• Access to our car benefit scheme
• Access to personal medical and dental insurance
• Access to discounts on superfast fibre broadband subscriptions
  
  

Liberty Global is an equal opportunity employer.

We embrace diversity and are committed to creating an inclusive environment for our people. We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process. We’re 100% committed to having a workforce that represents every part of our society. So we’re keen to hear from candidates of all background and circumstances.