Senior Information Security Officer

Salary: £90,000 - 90,000 per year

Requirements:

• Minimum 5 years experience working in an information security environment
• Proven experience in assessing and managing supplier and third-party security risk
• Strong communication skills, with the ability to translate technical concepts into clear, business-friendly messaging and produce high-quality documentation, including policies, standards and project artefacts
• Demonstrated experience working across projects and development lifecycles, including Agile environments
• Hands-on experience implementing and maintaining ISO27001 and broader security governance frameworks, such as ISO27001/2, NIST and PCI DSS
• Solid understanding of data protection and regulatory requirements, such as FCA, ICO, PRA and GDPR, and how to apply them in practice
• Ability to balance risk, compliance and business objectives in a fast-paced, evolving environment

Responsibilities:

• Drive the continuous improvement of our ISO27001 framework and Information Security Management System (ISMS), ensuring ongoing compliance
• Deliver key security initiatives that bring our Information Security Strategy to life and drive measurable impact
• Own and mature information risk management in alignment with our Enterprise Risk Framework
• Act as a trusted advisor on regulatory requirements and best-practice frameworks, including ISO27001, GDPR, NIST and ITIL, protecting the confidentiality, integrity and availability of systems
• Lead security governance forums and manage our Information Security Governance team, including the Information Risk function
• Embed security across projects and development lifecycles, ensuring risks are identified, assessed, including DPIAs, and effectively mitigated
• Oversee supplier and third-party security risk, working closely with Cyber Security Operations to protect our wider ecosystem
• Drive a strong security culture by maintaining policies, delivering compliance reviews and rolling out engaging awareness and training programmes

Technologies:

• ITIL
• Security
• Support

More:

We are partnering directly with Vitality to hire for this Senior Information Security Officer role within our Information Security team. This is a hybrid position based in our Bournemouth office, requiring 2 days per week onsite, with full-time hours of 35 per week. We are happy to discuss flexible working. We offer bonus schemes, a pension of up to 12% with matched contributions up to 6%, award-winning health insurance with rewards and benefits, and life assurance at four times annual salary. We are committed to supporting your health, wellbeing, growth and flexibility, and creating an environment where you can thrive, belong and contribute to our business and society.

last updated 35 week of 2026