How to learn about infosec?

ISO 27001 would be a good choice if you want to focus on management part of information security - this is what you could do for a start:
1) Attend a course - this article will help you: How to learn about ISO 27001 https://advisera.com/27001academy/blog/2010/11/30/how-to-learn-about-iso-27001-and-bs-25999-2/
2) See our ISO 27001 free webinars: https://advisera.com/27001academy/webinars/
3) See these free ISO 27001 Free Downloads: https://advisera.com/27001academy/free-downloads/

Alternatively, you can go for certifications like CISSP and CISM - they are not related to ISO 27001.

2. I am due to go on a foundation course and then the Lead Implementer course and then next year do my Lead Auditors course do you think this is the right way to go?

Perhaps foundation course would not be needed if you already have some experience in IT - in such case you can go straight to Lead Implementer course. Read also this article: Lead Auditor Course vs. Lead Implementer Course – Which one to go for? https://advisera.com/27001academy/blog/2014/06/16/lead-auditor-course-vs-lead-implementer-course-which-one-to-go-for/