Information & Cyber Security Executive

JR United Kingdom; Aberdeen City; Remote; GBP 68,000 - 80,000; Full time

Job summary

Une entreprise de services financiers recherche un Information & Cyber Security Executive passionné et orienté détail pour gérer la sécurité de l'information. Ce rôle exige des compétences en sécurité, en gouvernance, et en gestion des risques, tout en offrant une rémunération compétitive. Avec un environnement de travail flexible, ce poste permet une participation sporadique sur site.

Benefits

Car allowance

Flexible working conditions

Qualifications

• Expérience avec les évaluations de risque et la gestion des incidents.
• Compréhension des normes de conformité comme ISO 27001.
• Compétences exceptionnelles en communication et engagement des parties prenantes.

Responsibilities

• Assurer la conformité avec les politiques internes et standards de l'industrie.
• Réaliser des évaluations de risques des fournisseurs et de la diligence raisonnable.
• Surveiller l'efficacité des contrôles de sécurité pour garantir la confidentialité et l'intégrité.

Skills

Cyber security principles

Governance

Risk management

Analytical thinking

Communication

Education

Security certifications (CISSP, CISM, CISMP)

Tools

Microsoft Azure Security tools

Job description

Location: Remote with occasional travel

Employment Type: Full-Time

Reports To: Information Security Manager

Join our client's teams in Protecting What Matters

Our client is a financial services company. They are looking for a passionate and detail-oriented Information & Cyber Security Executive to join their team.

The role encompasses all aspects of information security including organizational security and governance, people security, physical (site) security, and technical security controls. The role will assess evolving technologies and threats and communicate the risks.

They offer a salary of up to £80k base + £5k car allowance and other benefits. The position is remote with occasional presence in Essex.

What You’ll Do

• Assess compliance with internal security policies and industry standards (e.g., ISO/IEC 27001/2, PCI-DSS).
• Conduct supplier risk assessments and third-party due diligence.
• Support vulnerability assessments, incident investigations, and operational resilience activities.
• Monitor the effectiveness of security controls to ensure confidentiality, integrity, and availability (CIA).
• Assist with security certifications and regulatory frameworks including GDPR.
• Translate technical risks into clear, business-friendly advice.
• Stay on-call during scheduled weeks for incident support and response.

Requirements

• Solid understanding of cyber security, governance, and risk management principles.
• Experience with risk/vulnerability assessments and incident management.
• Experience in first and second line support.
• Strong analytical thinking and attention to detail.
• Familiarity with compliance frameworks like ISO 27001 / 27002, NIST Cybersecurity Framework – 2.0 (preferably version 2), PCI DSS v4.0.
• Exceptional communication and stakeholder engagement skills.
• Experience with Microsoft Azure Security tools (Defender for Endpoint, Sentinel, Purview).
• Understanding of ITIL, data protection laws (UK GDPR), and payment card security.
• Security certifications such as CISSP, CISM, CISMP, or equivalent.