Information & Cyber Security Executive

JR United Kingdom; North East; Remote; GBP 80,000 - 95,000; Full time

Job summary

A leading financial services company is seeking an Information & Cyber Security Executive to protect organizational information and governance. The role involves assessing compliance, conducting risk assessments, and supporting security operations, offering competitive remuneration and remote flexibility.

Qualifications

• Solid understanding of cybersecurity and governance principles.
• Experience with risk assessments and incident management.
• Familiarity with compliance frameworks like ISO 27001/27002.

Responsibilities

• Assess compliance with security policies and standards.
• Conduct supplier risk assessments and third-party due diligence.
• Monitor effectiveness of security controls for CIA.

Skills

Cybersecurity

Risk Management

Analytical Thinking

Stakeholder Engagement

Attention to Detail

Education

Security Certifications (CISSP, CISM, CISMP)

Tools

Microsoft Azure Security tools

Job description

Social network you want to login/join with:

Information & Cyber Security Executive, Newcastle-upon-Tyne, Tyne and Wear

Client: McCabe & Barton

Location: Newcastle-upon-Tyne, Tyne and Wear, United Kingdom

Job Category: Other

EU work permit required: Yes

Job Views: 6

Posted: 26.06.2025

Expiry Date: 10.08.2025

Job Description:

Location: Remote with occasional travel

Employment Type: Full-Time

Reports To: Information Security Manager

Join our client's teams in Protecting What Matters

Our client is a financial services company. They are looking for a passionate and detail-oriented Information & Cyber Security Executive to join their team.

The role encompasses all aspects of information security, including organisational security and governance, people security, physical (site) security, and technical security controls. The role will assess evolving technologies and threats and communicate the risks.

They offer a salary up to £80k base + £5k car allowance and other benefits. Work is remote with occasional in-office presence in Essex.

What You’ll Do

• Assess compliance with internal security policies and industry standards (e.g., ISO/IEC 27001/2, PCI-DSS).
• Conduct supplier risk assessments and third-party due diligence.
• Support vulnerability assessments, incident investigations, and operational resilience activities.
• Monitor the effectiveness of security controls to ensure confidentiality, integrity, and availability (CIA).
• Assist with security certifications and regulatory frameworks including GDPR.
• Translate technical risks into clear, business-friendly advice.
• Stay on-call during scheduled weeks for incident support and response.

Requirements

• Solid understanding of cybersecurity, governance, and risk management principles.
• Experience with risk/vulnerability assessments and incident management.
• Experience with first and second line support.
• Strong analytical thinking and attention to detail.
• Familiarity with compliance frameworks like ISO 27001 / 27002, NIST Cybersecurity Framework 2.0 (preferably version 2), PCI DSS v4.0.
• Exceptional communication and stakeholder engagement skills.
• Experience with Microsoft Azure Security tools (Defender for Endpoint, Sentinel, Purview).
• Understanding of ITIL, data protection laws (UK GDPR), and payment card security.
• Security certifications such as CISSP, CISM, CISMP, or equivalent.