Senior Information Security Officer

Senior Information Security Officer
Up to £85,000 + 16% bonus Bournemouth (preferred), Stockport or London Permanent

Want a senior security role where you actually get to do security, not just write about it?

This is a hands-on role with a well-known UK health and life insurer that is investing in its information security function. You will own information security across the UK business, make ISO 27001 work in the real world, and build a team around you as it grows.

• Owning the ISMS and ISO 27001 compliance, and extending it across the wider UK group
• Managing information security risk in line with the enterprise risk framework
• Getting security into projects from day one, across the SDLC, including DPIAs
• Assessing and managing supplier security risk alongside the Cyber Security Operations Lead
• Owning the security policies and standards, and making sure people actually follow them
• Running the security awareness and training programme
• Chairing security committees and reporting to senior risk owners
• Leading the team: an Information Security Analyst to start, growing to 3 plus a consultant

• 7+ years in information security
• CISSP, CISM, CISA, an MSc or equivalent
• Hands-on ISO 27001 experience, plus frameworks such as NIST and PCI DSS
• Information security risk management and supplier assurance
• Working knowledge of FCA, PRA, ICO and GDPR requirements
• The ability to explain technical risk to non-technical people and bring them with you
• Insurance, healthcare or financial services experience and internal audit skills are a real plus

• Operational and live. Your time goes on solving problems and building relationships, not living in documentation
• A genuine leadership step, with the team growing around you
• A clear security strategy and senior backing to deliver it
• A quick process: interviews in November, offers before Christmas