Information & Cyber Security Executive

JR United Kingdom; Bristol; Hybrid; GBP 80,000 - 92,000; Full time

Job summary

Une entreprise de services financiers dynamique recherche un expert en cybersécurité passionné pour évaluer la sécurité des informations et gérer les risques. Le poste implique des tâches variées, de la conformité aux normes de sécurité à l'engagement auprès des parties prenantes. Situé à distance avec des déplacements occasionnels, ce rôle offre jusqu'à £80k par an, plus des avantages.

Qualifications

• Expérience en évaluations de sécurité et gestion des incidents.
• Connaissance des lois sur la protection des données (UK GDPR).
• Familiarité avec les cadres de conformité comme NIST Cybersecurity.

Responsibilities

• Évaluer la conformité aux politiques de sécurité internes et aux normes de l'industrie.
• Conduire des évaluations de risques fournisseurs et de diligence raisonnable.
• Surveiller l’efficacité des contrôles de sécurité pour garantir la confidentialité et l'intégrité.

Skills

Cyber security

Governance

Risk management

Analytical thinking

Attention to detail

Communication

Stakeholder engagement

Education

Security certifications (CISSP, CISM, CISMP)

Tools

Microsoft Azure Security tools

ISO 27001

PCI DSS

Job description

Social network you want to login/join with:

Information & Cyber Security Executive, bristol

col-narrow-left

Client:

McCabe & Barton

Location:

bristol, United Kingdom

Job Category:

Other

-

EU work permit required:

Yes

col-narrow-right

Job Views:

6

Posted:

26.06.2025

Expiry Date:

10.08.2025

col-wide

Job Description:

Location: Remote with occasional travel

Employment Type: Full-Time

Reports To: Information Security Manager

Join our client's teams in Protecting What Matters

Our client is financial service company. They are looking for a passionate and detail-oriented Information & Cyber Security Executive to join the teams.

The role encompasses all aspects of information security including organisational security and governance, people security, physical (site) security and technical security controls. The role will assess evolving technologies and threats and communicate the risks.

They offer salary up to £80k base + £5k car allowance and other benefits. Working remotely with occasional be in office in Essex.

What You’ll Do

• Assess compliance with internal security policies and industry standards (e.g., ISO/IEC 27001/2, PCI-DSS).
• Conduct supplier risk assessments and third-party due diligence.
• Support vulnerability assessments, incident investigations, and operational resilience activities.
• Monitor the effectiveness of security controls to ensure confidentiality, integrity, and availability (CIA).
• Assist with security certifications and regulatory frameworks including GDPR.
• Translate technical risks into clear, business-friendly advice.
• Stay on-call during scheduled weeks for incident support and response.

Requirements

• Solid understanding of cyber security, governance, and risk management principles.
• Experience with risk/vulnerability assessments and incident management.
• Experience first and second line support
• Strong analytical thinking and attention to detail.
• Familiarity with compliance frameworks like ISO 27001 / 27002,NIST Cybersecurity Framework – 2.0 ideally version 2, PCI DSS v4.0
• Exceptional communication and stakeholder engagement skills.
• Experience with Microsoft Azure Security tools (Defender for Endpoint, Sentinel, Purview).
• Understanding of ITIL, data protection laws (UK GDPR), and payment card security.
• Security certifications such as CISSP, CISM, CISMP or equivalent.