Information Security Officer

Salary: £75,000 - 85,000 per year

Requirements:

• Strong experience in policy and standards development.
• Cyber incident response expertise.
• Security architecture knowledge.
• In-depth understanding of ISO27001 controls.
• Experience with Cyber Essentials Plus certification.
• Strong risk management capability.
• Proven ability to communicate with and influence senior stakeholders.
• Audit process management experience is desirable.
• Supplier risk review experience is desirable.
• Degree-level education is preferred but not essential.
• Minimum 5 years experience in an information security role.
• CISSP or equivalent certification is required.
• C|CISO certification is desirable.

Responsibilities:

• Manage and maintain the Information Security Management System (ISMS) aligned to ISO27001.
• Oversee external certification processes and manage external audit programmes.
• Deliver the internal information security audit programme.
• Own monthly and quarterly information security governance forums.
• Define and continuously evolve our information security strategy.
• Act as a security architecture subject matter expert to support system development and change initiatives.
• Advise operational teams on the implementation and improvement of security controls.
• Develop and deliver a company-wide information security training and awareness programme.
• Serve as the primary incident response manager for information security incidents.
• Manage and review information security risks across the organisation.
• Lead information security improvement initiatives.
• Oversee supply chain information security risks and vendor assessments.

Technologies:

• Embedded
• Support
• Security

More:

We are seeking an experienced Information Security Officer to play a pivotal role in managing and enhancing our clients security posture. Working closely with our IT leadership team, this role will ensure the right security controls are embedded into the systems we design, build and operate. You will also act as a company-wide champion for information security, supporting teams, raising awareness, and ensuring compliance with legal, regulatory and contractual obligations. We are committed to maintaining our ISO27001 and Cyber Essentials Plus certifications and to continually strengthening our information security governance and resilience.

last updated 31 week of 2026