InformationSecurityOfficer - Risk. - Hybrid - Lancashire £61,500 10.5% bonus 14% pension healthcare plus additional benefits. InformationSecurityOfficer with Risk management and risk register experience needed as part of an extremely well-funded growing cyber security team for this North West based enterprise level critical national infrastructure organisation. As the InformationSecurityOfficer for Risk your primary purpose will be to become a trusted cyber security risk advisor, ensuring the business is compliant against security policy, acting as advisory, collaborating with stakeholders and management to assess risks, review and advise ratings for IT/OT/Physical Cyber risks and support business coordinators in assessing their … risk position. As the InformationSecurityOfficer for Risk, you will build strong relationships with business and technology functions as well as 3rd parties offering real world experience of cyber security risk management In this role you will act in an advisory capacity to the business day-to-day basis monitoring cyber security risk, compliance More ❯
InformationSecurityOfficer - Risk. - Hybrid - Lancashire £61,500 10.5% bonus 14% pension healthcare plus additional benefits. InformationSecurityOfficer with Risk management and risk register experience needed as part of an extremely well-funded growing cyber security team for this North West based enterprise level critical national infrastructure organisation. As the InformationSecurityOfficer for Risk your primary purpose will be to become a trusted cyber security risk advisor, ensuring the business is compliant against security policy, acting as advisory, collaborating with stakeholders and management to assess risks, review and advise ratings for IT/OT/Physical Cyber risks and support business coordinators in assessing their … risk position. As the InformationSecurityOfficer for Risk, you will build strong relationships with business and technology functions as well as 3rd parties offering real world experience of cyber security risk management In this role you will act in an advisory capacity to the business day-to-day basis monitoring cyber security risk, compliance More ❯
Your new role - Permanent - ON SITE 5 Days per week. You will be required to obtain security clearance and undergo vigorous onboarding checks - UK Only. Sponsorship NOT available.The main purpose of this job mainly focusses on informationsecurity, cybersecurity, and data security, including a wide scope, such as physical security of computer rooms, operating system … level security of Windows and Linux, network security of firewall and other security devices, application security both development and testing phrases, terminal security, backup security, third party and supply chain security of IT service provider.Liaison with the Head Office, Security Operation Centre or Data Centre for implementing security policies, projects and … security controls. Work with Internal Audit and other departments to execute penetration tests, cybersecurity risk self-assessment, ensure best practice and international baseline standards are in place and in line with local regulations.The ideal candidate will be responsible for managing informationsecurity systems, ensuring compliance with regulatory requirements, and conducting thorough security audits.You will be part More ❯
City Of London, England, United Kingdom Hybrid / WFH Options
DGH Recruitment
InformationSecurityOfficer Hybrid working: 3 days per week required in the office in London. DGH Recruitment are currently recruiting on behalf of a leading global law firm who are looking for an InformationSecurityOfficer to join the team on a permanent basis. The InformationSecurityOfficer will play a … key role in ensuring the security of my clients systems and data by evaluating the risks associated with third-party vendors and internal projects and then recommending appropriate risk mitigation strategies. Responsibilities: - Conduct vendor risk assessments and project security risk assessments based on established methodologies and frameworks. - Evaluate security risks associated with third-party vendors and internal … projects, considering factors such as security, privacy, and compliance. - Ensure compliance with security policies, standards, and procedures in vendor relationships and project activities. - Develop and maintain security assessment frameworks and methodologies for vendor risk assessments and project security risk assessments. - Conduct periodic reviews and audits to ensure compliance with security policies, standards, and regulatory requirements. More ❯
Milton Keynes, Buckinghamshire, South East, United Kingdom
Oscar Associates (UK) Limited
Role: InformationSecurityOfficer Location: Milton Keynes Salary: £50k - £60k Work Pattern: Hybrid Summary: A new position has opened at an exciting software company for an InformationSecurityOfficer to lead the organisation's security strategy, operations, and compliance efforts. This hands-on role blends strategic security architecture with day-to-day … operational management and regulatory compliance oversight. The ideal candidate will establish and maintain security standards across the product portfolio, oversee secure system environments, and act as the primary contact for ISO 27001, PCI DSS, and GDPR compliance. Additionally, this role will support our commercial teams by contributing to tender responses and ensuring client security assurance. The Company: They … experience and a broad global client base, they develop solutions that simplify complexity and drive smarter, more efficient ways of working. Core Responsibilities: Strategic (30%) Define and maintain robust security architecture and standards across multi-cloud SaaS platforms. Integrate security best practices into product design, development, and roadmap planning. Conduct threat modelling and risk assessments for new features More ❯
InformationSecurityOfficer Full-time, Permanent Basingstoke (hybrid) £85,000 Reassured are looking for an InformationSecurityOfficer to lead and evolve our approach to protecting data, systems and customer trust. If you're passionate about embedding security into business operations and driving awareness across teams, this is a brilliant opportunity to make … a real impact. You’ll be responsible for managing our informationsecurity operations, governance and certifications, including ISO27001 and Cyber Essentials Plus. Working closely with IT leadership and stakeholders across the business, you’ll ensure our systems and processes meet the highest standards while fostering a culture of security-first thinking. What you'll be doing: Leading … the development and delivery of our informationsecurity strategy Managing audits, certifications and risk assessments Supporting secure system design and change Driving company-wide security awareness and training Acting as Incident Response Manager for security events What we're looking for: 5+ years’ experience in informationsecurity Strong knowledge of ISO27001, Cyber Essentials Plus More ❯
Newcastle upon Tyne, Tyne and Wear, Tyne & Wear, United Kingdom
Tria
InformationSecurityOfficer/ISO27001/Data Protection £65,000 - £75,000 + Benefits Newcastle Our client is an internationally renowned SaaS organisation that's flagship product is used by household media organisations around the world. They're looking for an InformationSecurityOfficer to join the organisation to drive their infosec maturity. You … ll be responsible for designing and implementing their security procedures in line with ISO27001, GDPR and Cyber Essentials+, ensuring compliance across the business. You will also act as the Data Protection Officer and work with stakeholders of across the business to ensure awareness of cyber security best practices. You must have proven experience as an InformationSecurityOfficer who has taken a business through the ISO27001 accreditation process. You'll have outstanding stakeholder management experience and the ability to articulate complex security challenges to non-technical stakeholders to ensure standards are met. Newcastle £65,000 - £75,000 + Benefits InformationSecurityOfficer/ISO27001/Data Protection More ❯
InformationSecurityOfficer – Permanent, Hybrid, Milton Keynes Salary £50k-£60k plus benefits We are looking for an experienced InformationSecurityOfficer to lead security strategy, operations, and compliance. This is a hands-on role combining strategic security architecture with operational security management and regulatory compliance oversight. The successful candidate will define … security standards across the business product portfolio, manage security environments, and serve as central point for ISO27001, PCI/DSS, and GDPR compliance while supporting commercial teams with tender responses and client security assurance. Key responsibilities: Define technical security architecture and standards across multi-cloud SaaS platforms Embed security into product development lifecycle and roadmap … planning Conduct threat modelling and risk assessments for new features and system changes Evaluate and recommend security technologies and tools Manage security environments across Azure and AWS infrastructure Coordinate security incident response and vulnerability remediation Oversee security monitoring, alerting, and detection capabilities Manage vulnerability assessment and penetration testing programs Maintain identity and access management controls Maintain More ❯
InformationSecurityOfficer 📍 London (Hybrid) | 💼 Permanent, Full-time Salary - £60,000 - £70,000 p/a + Benefits About the Role A leading digital bank is seeking a talented and ambitious InformationSecurityOfficer to join its growing Cybersecurity Department. This is a key role acting as the bridge between the bank’s London … operations and the Group’s Cyber and InformationSecurity team. You will play a pivotal part in ensuring that cybersecurity controls are effectively implemented, risks are well-managed, and the bank’s information assets remain secure. The ideal candidate will combine strong technical understanding with strategic insight — ensuring the integrity, confidentiality, and availability of critical information while supporting the business in achieving its goals securely. Key Responsibilities Ensure compliance with Group Cyber and InformationSecurity requirements. Act as the first point of contact for all cybersecurity-related requests in the London office. Perform compliance reviews and oversee remediation of cybersecurity weaknesses. Coordinate security testing, incident management, and reporting of key cybersecurity metrics More ❯
City of London, London, United Kingdom Hybrid / WFH Options
ea Change
InformationSecurityOfficer 📍 London (Hybrid) | 💼 Permanent, Full-time Salary - £60,000 - £70,000 p/a + Benefits About the Role A leading digital bank is seeking a talented and ambitious InformationSecurityOfficer to join its growing Cybersecurity Department. This is a key role acting as the bridge between the bank’s London … operations and the Group’s Cyber and InformationSecurity team. You will play a pivotal part in ensuring that cybersecurity controls are effectively implemented, risks are well-managed, and the bank’s information assets remain secure. The ideal candidate will combine strong technical understanding with strategic insight — ensuring the integrity, confidentiality, and availability of critical information while supporting the business in achieving its goals securely. Key Responsibilities Ensure compliance with Group Cyber and InformationSecurity requirements. Act as the first point of contact for all cybersecurity-related requests in the London office. Perform compliance reviews and oversee remediation of cybersecurity weaknesses. Coordinate security testing, incident management, and reporting of key cybersecurity metrics More ❯
Bexleyheath, Kent, England, United Kingdom Hybrid / WFH Options
Reed
InformationSecurity and Governance Officer Location: Bexleyheath Job Type: Temporary (6 months) with potential for permanent Salary: £127 per day We are seeking an InformationSecurity and Governance Officer to join a local authority based in Bexleyheath. This role offers an immediate start and is an excellent opportunity for individuals with strong administrative backgrounds … and relevant governance experience looking to advance their careers. Day-to-day of the role: Policy Support: Assist with the maintenance and implementation of the Council’s Information Governance Framework, policies, and procedures. Security Standards: Monitor compliance with informationsecurity and data handling policies, identifying and reporting potential risks or non-compliance. Information Risk: Contribute … to the management of information risks, ensuring these are logged and escalated in accordance with agreed processes. Data Sharing: Review and record data sharing arrangements and support the completion of data sharing agreements and contracts under supervision. Statutory Requests: Manage or assist with the processing of requests made under FOIA, EIR, and Subject Access Requests (SARs), ensuring statutory deadlines More ❯
Milton Keynes, Buckinghamshire, England, United Kingdom
Altitude-Recruitment Limited
Permanent Based in Milton Keynes £50,000 pa - £60,000 pa InformationSecurityOfficer Hybrid Our client are a leading provider of software solutions for student accommodation, event management, catering, and residential services, they help institutions streamline operations, elevate customer experiences, and unlock their full potential.With over 25 years of experience and trusted by more than … and your impact is real. If you're ready to help shape the future of operational technology in education and events, we'd love to meet you. An experienced InformationSecurityOfficer to lead security strategy, operations, and compliance. This is a hands-on role combining strategic security architecture with operational security management and … regulatory compliance oversight. The successful candidate will define security standards across our product portfolio, manage security environments, and serve as our central point for ISO27001, PCI/DSS, and GDPR compliance while supporting commercial teams with tender responses and client security assurance. Core Responsibilities: Strategic (30%) Define technical security architecture and standards across multi-cloud SaaS More ❯
Permanent Based in Milton Keynes £50,000 pa - £60,000 pa InformationSecurityOfficer Hybrid Our client are a leading provider of software solutions for student accommodation, event management, catering, and residential services, they help institutions streamline operations, elevate customer experiences, and unlock their full potential. With over 25 years of experience and trusted by more than … and your impact is real. If you're ready to help shape the future of operational technology in education and events, we'd love to meet you. An experienced InformationSecurityOfficer to lead security strategy, operations, and compliance. This is a hands-on role combining strategic security architecture with operational security management and … regulatory compliance oversight. The successful candidate will define security standards across our product portfolio, manage security environments, and serve as our central point for ISO27001, PCI/DSS, and GDPR compliance while supporting commercial teams with tender responses and client security assurance. Core Responsibilities: Strategic (30%) Define technical security architecture and standards across multi-cloud SaaS More ❯
Chief InformationSecurityOfficer page is loaded Chief InformationSecurity Officerlocations: London, UKtime type: Full timeposted on: Posted Todayjob requisition id: JR100302 Who we are We're the people behind global loyalty currency, Avios, and home to two ambitious, growing businesses across Loyalty and Holidays. Each business has its own goals, strategy and team, but … story to tell our people and the rest of the world. This is where you come in. The opportunity We have a brand new opportunity for an experienced Chief InformationSecurityOfficer (CISO) to lead the information and cyber security strategy across IAG Loyalty companies, which include Loyalty (the Avios currency) and British Airways Holidays.Reporting … to the Chief Technology, Data & AI Officer you'll establish a unified security vision and governance framework, while tailoring risk-based solutions to the unique needs of each company.You'll be the principal advisor to the executive team and board on cybersecurity matters affecting our businesses, but you'll also play a key role across the wider IAG More ❯
City of London, London, United Kingdom Hybrid / WFH Options
Ryder Reid Legal
InformationSecurityOfficer – International Law Firm (London-Based) Permanent | Hybrid Working | Competitive Salary I am working with a leading international law firm to support their search for an experienced and proactive InformationSecurityOfficer (ISO) to lead their global information and data security programme. This senior-level role offers the opportunity to … shape the firm’s long-term security strategy, drive ISO 27001 certification, and ensure the resilience of systems and data across offices in the UK, US, and Europe. The position reports to the Director of IT and works closely with regional IT teams and external partners. Key Responsibilities: Lead the firm’s informationsecurity governance framework across … all offices and platforms Maintain and enhance the ISO 27001-aligned InformationSecurity Management System (ISMS) Ensure compliance with frameworks including CIS Controls, NIST, ISO 27701, and GDPR Oversee incident response, threat detection, and access governance across systems such as iManage, Intapp, Aderant, Microsoft 365, and Azure Drive firm-wide security awareness and training initiatives Monitor regulatory More ❯
InformationSecurityOfficer – International Law Firm (London-Based) Permanent | Hybrid Working | Competitive Salary I am working with a leading international law firm to support their search for an experienced and proactive InformationSecurityOfficer (ISO) to lead their global information and data security programme. This senior-level role offers the opportunity to … shape the firm’s long-term security strategy, drive ISO 27001 certification, and ensure the resilience of systems and data across offices in the UK, US, and Europe. The position reports to the Director of IT and works closely with regional IT teams and external partners. Key Responsibilities: Lead the firm’s informationsecurity governance framework across … all offices and platforms Maintain and enhance the ISO 27001-aligned InformationSecurity Management System (ISMS) Ensure compliance with frameworks including CIS Controls, NIST, ISO 27701, and GDPR Oversee incident response, threat detection, and access governance across systems such as iManage, Intapp, Aderant, Microsoft 365, and Azure Drive firm-wide security awareness and training initiatives Monitor regulatory More ❯
London, South East, England, United Kingdom Hybrid / WFH Options
Ryder Reid Legal Ltd
InformationSecurityOfficer - International Law Firm (London-Based) Permanent | Hybrid Working | Competitive Salary I am working with a leading international law firm to support their search for an experienced and proactive InformationSecurityOfficer (ISO) to lead their global information and data security programme. This senior-level role offers the opportunity to … shape the firm's long-term security strategy, drive ISO 27001 certification, and ensure the resilience of systems and data across offices in the UK, US, and Europe. The position reports to the Director of IT and works closely with regional IT teams and external partners. Key Responsibilities: Lead the firm's informationsecurity governance framework across … all offices and platforms Maintain and enhance the ISO 27001-aligned InformationSecurity Management System (ISMS) Ensure compliance with frameworks including CIS Controls, NIST, ISO 27701, and GDPR Oversee incident response, threat detection, and access governance across systems such as iManage, Intapp, Aderant, Microsoft 365, and Azure Drive firm-wide security awareness and training initiatives Monitor regulatory More ❯
InformationSecurityOfficer (work from home) You will be working with the InformationSecurity Manager on multiple projects to aid implementation of the InformationSecurity Strategy enhancing the company's global data and security program and ensuring compliance with IS027001 and GDPR . Role is very project based, working as a trusted … partner/business enabler to the business around information governance and risk issues across the company in UK. Ensuring all relevant legal, regulatory and contractual compliances are met (such as ISO27001 and Cyber Essentials are maintained). Experience are Cloud/AI/technology refresh programmes were you have been the InformationSecurity advisor and ultimately making … the projects safe would be of interest. Any experience in client audits/NIST frameworks/Security Privacy Strategies would be advantageous . Anyexperience working for consultancies including Big 4 or the Legal sector would be advantageous . I am looking for someone who would have these type of qualification - CISSP, CISM, CRISC, NIST or ISO27001 would be expected More ❯
InformationSecurityOfficer (work from home) You will be working with the InformationSecurity Manager on multiple projects to aid implementation of the InformationSecurity Strategy enhancing the company's global data and security program and ensuring compliance with IS027001 and GDPR click apply for full job details More ❯
InformationSecurity Consultant - Virtual CISO (vCISO) 💷 Up to £60,000 | 🌍 Hybrid My client is seeking an experienced cyber security professional to step into an InformationSecurityOfficer role, acting as a trusted advisor to a diverse portfolio of organisations. This is an opportunity to directly influence and shape cyber security strategies at board … level while embedding yourself as a valued extension of your clients’ security teams. Key Responsibilities Serve as a strategic security partner, helping clients to define, develop, and mature their cyber security roadmap. Take ownership of internal Security Improvement Plans, ensuring risks are reduced and resilience is increased. Lead governance and oversight activities, including risk reviews, board … level reporting, and mentoring client teams. Carry out security reviews across cloud, hybrid, and on-premises environments, identifying vulnerabilities and improvement areas. Provide guidance on compliance and frameworks such as ISO 27001, Cyber Assessment Framework (CAF), and Cyber Essentials. Contribute to incident readiness and response as part of the Cyber Security Incident Response Team (CSIRT). Actively contribute More ❯
Chief InformationSecurityOfficer (CISO) - Critical Infrastructure We are partnered with a world-leading IT company that underpins critical UK infrastructure (including the NHS). They are a mission-driven entity that protects the nation’s digital foundation from state-level cyberattacks. Up to £130k + 20% Bonus | Oxford (1-2 days a week) | Permanent You'll … networking, and threat analytics. The ability to influence and present at the Board/Executive level. Lead the transformation to a "world-class software organisation" by embedding DevSecOps and "security as code." Ensure compliance with ISO 27001, Cyber Essentials, and PSN CoC. Why join? . This organisation is a Public Benefit company committed to investing millions into social good. More ❯
strategic lead for safeguarding the integrity, confidentiality, and availability of data, systems, and operations across its global digital taxation platform. As a senior executive, the CISO will ensure that security is embedded in the architecture, products, operations, and deployment of services and solutions delivered to governments and digital service providers worldwide. This is a high-visibility role: you will … interact with national tax authorities, regulators, international stakeholders, and internal leadership to drive trust and resilience across all operations. Key Responsibilities Strategy & Vision Define and lead a global informationsecurity vision aligned with the mission to support fair and secure digital taxation across jurisdictions. Translate business objectives, regulatory frameworks, and threat landscapes into actionable security and risk … strategies. Shape the security culture: champion awareness, training, and security-first thinking from engineering to client-facing teams. Governance, Risk & Compliance Develop and maintain security policies, standards, and controls, tailored for cross jurisdictional compliance (e.g. GDPR, DORA, local tax/financial regulations). Lead periodic risk and security assessments (e.g. penetration testing, threat modeling, audit readiness More ❯
What You'll Be Working On: ️ Leading and developing the organization's informationsecurity strategy, policies, and programs ️ Overseeing the implementation of risk management practices and ensuring compliance with industry regulations (e.g., GDPR, ISO 27001) ️ Managing and mentoring the cybersecurity team to strengthen the organization's security posture ️ Collaborating with cross-functional teams to align security … leadership on the state of cybersecurity and potential risks What We're Looking For: ️ Proven experience as a CISO or in a senior cybersecurity leadership role ️ Extensive knowledge of informationsecurity frameworks, governance, and compliance standards ️ Strong experience in risk management, incident response, and disaster recovery planning ️ Ability to communicate complex security concepts to non-technical stakeholders More ❯
Overview The Interim CISO will provide immediate, strategic and operational security leadership on a fixed-term basis. The primary mandate is to conduct a rapid, high-impact review and uplift of critical security governance functions, focusing specifically on asset management, third-party assurance, and incident preparedness. Key Responsibilities and Deliverables: The successful candidate will be a hands-on … leader responsible for the following key reviews: 1. Group Information Asset Register (IAR) Review Audit and Validate the current IAR structure, completeness, and accuracy of Confidentiality, Integrity, and Availability (CIA) classifications. Establish a repeatable, documented process for the continuous identification, registration, and risk-linkage of all high-value information assets. 2. 3rd Party Assurance Process Uplift Assess and … Refine the entire Third-Party Risk Management (TPRM) lifecycle, identifying gaps in vendor security due diligence and ongoing monitoring. Define a tiered, risk-based methodology for assurance reviews, ensuring the rigor of the review matches the vendor's inherent risk to the organization. 3. Incident Response and Recovery Plan (IRRP) Validation Critically Review the current IRRP for clarity, compliance More ❯
City of London, London, United Kingdom Hybrid / WFH Options
Futurist
CISO | Global SaaS | PE-Backed | Build & Lead Security Function A high-growth global SaaS business with 600 people worldwide (130 in Engineering) is entering a critical phase: consolidating multiple products and scaling from ~$100m ARR to ~$200m over the next three years. Backed by a leading private equity firm, this is a rare opportunity to own and build the … security function from scratch , shaping strategy, operations, and security culture across the company. We’re looking for a hands-on, technically credible CISO who thrives at the intersection of strategy and execution. You’ll define the security agenda, build the team, implement robust practices across engineering and product teams, and create a culture where security is … embedded into every aspect of the business. You’ll need experience scaling security in SaaS, ideally in PE-backed environments, and a track record of delivering measurable improvements across people, processes, and technology. Reporting to the CTO, you’ll take full ownership of the security function, partnering closely with Engineering, Product, and leadership to protect growth, enable innovation More ❯