Information & Cyber Security Executive

JR United Kingdom; Leeds; Remote; GBP 60,000 - 80,000; Full time

Job summary

A leading financial services company is seeking a dedicated Information & Cyber Security Executive to enhance their security posture. This remote role involves compliance assessments, vulnerability management, and translating security risks into business terms. Candidates should possess strong analytical skills, relevant certifications, and proven experience in cybersecurity governance and risk management.

Qualifications

• Understanding of ITIL, data protection laws (UK GDPR), and payment card security.
• Experience with risk/vulnerability assessments and incident management.
• Familiarity with compliance frameworks and incident response.

Responsibilities

• Assess compliance with internal security policies and industry standards.
• Conduct supplier risk assessments and third-party due diligence.
• Monitor the effectiveness of security controls to ensure confidentiality.

Skills

Analytical Thinking

Attention to Detail

Cyber Security Principles

Governance and Risk Management

Communication Skills

Stakeholder Engagement

Education

Security Certifications (CISSP, CISM, CISMP)

Tools

Microsoft Azure Security Tools

ISO 27001 / 27002

NIST Cybersecurity Framework

PCI DSS v4.0

Job description

Location: Remote with occasional travel

Employment Type: Full-Time

Reports To: Information Security Manager

Join our client's teams in Protecting What Matters

Our client is a financial services company seeking a passionate and detail-oriented Information & Cyber Security Executive to join their team.

The role covers all aspects of information security, including organisational security and governance, people security, physical (site) security, and technical security controls. The role involves assessing emerging technologies and threats and communicating risks effectively.

They offer a salary up to £80k base + £5k car allowance and other benefits. The position is remote with occasional travel to their office in Essex.

What You’ll Do

• Assess compliance with internal security policies and industry standards (e.g., ISO/IEC 27001/2, PCI-DSS).
• Conduct supplier risk assessments and third-party due diligence.
• Support vulnerability assessments, incident investigations, and operational resilience activities.
• Monitor the effectiveness of security controls to ensure confidentiality, integrity, and availability (CIA).
• Assist with security certifications and regulatory frameworks including GDPR.
• Translate technical risks into clear, business-friendly advice.
• Stay on-call during scheduled weeks for incident support and response.

Requirements

• Solid understanding of cyber security, governance, and risk management principles.
• Experience with risk/vulnerability assessments and incident management.
• Experience with first and second line support.
• Strong analytical thinking and attention to detail.
• Familiarity with compliance frameworks like ISO 27001 / 27002, NIST Cybersecurity Framework 2.0 (preferably version 2), PCI DSS v4.0.
• Exceptional communication and stakeholder engagement skills.
• Experience with Microsoft Azure Security tools (Defender for Endpoint, Sentinel, Purview).
• Understanding of ITIL, data protection laws (UK GDPR), and payment card security.
• Security certifications such as CISSP, CISM, CISMP, or equivalent.