Senior Information Security Officer

Our client is a health and life insurance provider. Team – Information Security Working Pattern - Hybrid – 2 days per week in our Bournemouth, London or Stockport Office. Full-time hours apply. We are happy to discuss flexible working!

Top 3 skills needed for this role: Proven security governance expertise Strong information risk judgement Credible stakeholder communication What this role is all about Play a key role in shaping the future of Information Security at our client.

As our Senior Information Security Officer, you'll lead on security governance and risk, strengthen our ISO 27001 framework and bring clear, practical security thinking to key business decisions. From strategic projects and suppliers to regulatory requirements, you'll influence across the business, drive continuous improvement and support the development of our wider Information Security Strategy.

What you will be doing Lead the continuous improvement and maintenance of the Information Security Management System and ISO 27001 compliance across our UK Group Manage information security risks in line with the Enterprise Risk Framework, ensuring appropriate controls, ownership and reporting are in place Deliver strategic information security initiatives and projects aligned with the wider Information Security Strategy Provide authoritative guidance on regulatory requirements, data protection and security frameworks including ISO 27001, NIST, PCI DSS and GDPR Oversee security governance across projects, procurement and development activity, ensuring risks are addressed throughout the SDLC and DPIA process Maintain information security policies, standards, procedures and guidance, ensuring they remain effective and aligned with emerging requirements Develop and deliver planned compliance reviews, track identified gaps and ensure agreed remediation activity is completed Chair security committees, produce governance and risk reporting for senior stakeholders and represent our client at relevant external forums Lead and support the Information Security Analyst while building strong relationships across the business to strengthen security awareness and accountability What do you need to thrive?

Extensive experience working in information security, with strong knowledge of governance, risk management and regulatory compliance Professional security qualifications or certifications such as CISSP, CISM, CISA, an MSc or an equivalent recognised qualification Proven experience managing ISO 27001 and other security governance frameworks such as NIST or PCI DSS Strong understanding of data protection and regulatory r...

Report this job