Hybrid Information Security Officer - Policy & Risk

Sanctuary; Worcester; Hybrid; GBP 47,000 - 49,000; Full time

Benefits offered by this job

25 days annual leave

Pension scheme

Life Assurance

Employee Advice Service

Cycle to Work

Wellbeing support

Rewards platform & discounts

Staff Networks

Job summary

Sanctuary is seeking an experienced Information Security Officer to join our Technology Security team in Worcester. The role supports security governance, policy development, and incident response to protect the Group’s data and systems.

You will work across staff and partners, applying ISO27001 and GDPR knowledge to enhance security controls, while collaborating with the Service Desk to maintain high-quality service and a security-aware culture.

Qualifications

• Experience in information security within a large, complex organisation.
• Proven ability to meet deadlines and manage workloads.
• Experience resolving technical security issues.
• Experience with information security tools.
• Knowledge of ISO27001 and NIST frameworks.
• Experience with data protection and GDPR.
• Ability to extract and interpret data.
• Understanding of the Data Protection Act and its application.
• Excellent communication and customer care skills.

Responsibilities

• Supporting the development and maintenance of information security policies and processes to ensure data, systems and applications are secure and robust.
• Providing support and advice to staff and partners on governance and compliance frameworks, policies and procedures as needed.
• Supporting the effective resolution of customers' security issues and queries.
• Liaising with the Technology Service Desk to ensure a high-quality level of customer service is provided.
• Carrying out appraisals of new and existing processes and their suitability to meet the future needs of the Group whilst meeting security requirements.
• Identifying risks and vulnerabilities and raising awareness of these information security issues.
• Promoting digital health and wellbeing.

Skills

InfoSec practices

ISO27001

NIST

Data protection/GDPR

Security tools

Communication skills

Deadline-driven

Risk awareness

Tools

Security tools platforms

Job description

Sanctuary is seeking an experienced Information Security Officer to join our Technology Security team in Worcester. The role supports security governance, policy development, and incident response to protect the Group’s data and systems.

You will work across staff and partners, applying ISO27001 and GDPR knowledge to enhance security controls, while collaborating with the Service Desk to maintain high-quality service and a security-aware culture.