Information Security & Compliance Officer

HSS Hire Group; Stretford; Hybrid; GBP 50,000 - 70,000; Full time

Job summary

Une entreprise innovante du secteur des services de construction cherche un Responsable de la Sécurité et de la Conformité pour diriger et développer le cadre de conformité. Vous serez au cœur de l'équipe Gouvernance, Risque et Conformité, en vous assurant que la plateforme est sécurisée et fiable. Des avantages compétitifs et une culture d'entreprise inclusive sont offerts.

Benefits

Congé pour votre anniversaire chaque année

Un jour par an pour un travail bénévole

Opportunités de formation et de développement

Soutien au bien-être et à la santé

Réductions sur une large gamme d'achats

Options d'avantages flexibles

Qualifications

• Minimum 3 ans d'expérience en sécurité ou conformité dans des organisations de taille intermédiaire à grande.
• Connaissance approfondie des normes ISO 27001, UK GDPR, Cyber Essentials.
• Compétences en communication forte pour traduire des sujets complexes.

Responsibilities

• Développer et gérer le système de gestion de la sécurité de l'information (ISMS) conforme à ISO 27001.
• Maintenir les politiques de sécurité et s'assurer de la conformité avec le UK GDPR et d'autres normes.
• Diriger les efforts de réponse aux incidents, de l'analyse des causes à l'examen post-incident.

Skills

Communication

Gestion des risques

Connaissance de la conformité

Education

Certification ISO 27001

Tools

Outils de scanning

Gestion des accès

Job description

Information Security & Compliance Officer
Hybrid

HSS ProService is revolutionising the building services industry, offering a cutting-edge online marketplace for tools, equipment, and materials. Building on HSS Hire's legacy, we're blending innovation and customer-driven solutions to focus on sustainability.

We're looking for an experienced Information Security & Compliance Officer to lead and evolve our security and compliance framework, protecting our customers, our data, and our business as we scale.

The impact you’ll have:

You’ll be the heart of our Governance, Risk & Compliance team, designing and delivering a security and compliance function that’s future-ready. From technical controls to cultural awareness, you’ll help us stay ahead of emerging risks and regulations, ensuring our platform is resilient, secure, and trusted by every customer and supplier.

A typical day:

• Develop and own our Information Security Management System (ISMS) aligned with ISO 27001
• Maintain security policies, control frameworks, and ensure compliance with UK GDPR, Cyber Essentials Plus, PCI-DSS, and DPA
• Conduct risk assessments, manage our risk register, and lead remediation actions
• Oversee security tooling and controls, from endpoint protection to vulnerability management
• Support platform and IT teams on secure design, deployments, and third-party risk
• Lead incident response efforts, from root cause analysis to post-incident reviews
• Deliver training and awareness programmes that embed a culture of security across the business
• Collaborate with senior leadership, providing clear reporting on posture, risks, and improvements
• Act as the go-to expert on security and compliance across all business units

What you’ll bring:

• 3+ years’ experience in security, compliance, or risk roles within mid-to-large UK organisations
• Deep knowledge of ISO 27001, UK GDPR, and frameworks like Cyber Essentials
• Practical experience with risk management, audit preparation, incident response, and policy development
• Familiarity with technical controls such as access management, scanning tools, and endpoint security
• Strong communication and influencing skills, able to translate complex topics for all levels
• Proficiency in Excel, PowerPoint, and reporting for stakeholder engagement

It’d be great if you also have:

• Certifications like ISO 27001 Lead Implementer/Auditor, CISSP, CISA, or CRISC
• Experience in cloud environments (Microsoft 365, Azure, AWS)
• Exposure to SIEM, DLP, or GRC platforms
• Background in B2B, e-commerce, logistics, or construction supply chains

What you’ll get back:

Join a forward-thinking team committed to transforming how businesses operate, using the latest technology and a bold vision. If you're passionate about being part of an industry disruptor, this is the place to build your career.

• Your birthday each year as annual leave to spend how you want to!
• One day per year to contribute to local voluntary work, giving back to your community
• Training and development opportunities to further your career and access relevant courses
• Wellbeing and healthcare support to ensure you stay happy and healthy at work and home
• A culture of revolution, driving digital and technological change in a traditional industry
• Discounts and cashback on a wide range of purchases including days out, restaurants, gym memberships, and shopping
• Flexible benefits options through our Benefits portal, such as Critical Illness Cover, Cycle To Work, Holiday Buy Scheme, and more

We are laying the foundation for a new era in the building services industry, creating a place where every voice helps build the future. No matter your background, if your contribution will help grow our business, we want to hear from you.

We're committed to breaking down barriers and fostering a diverse community where everyone has the chance to contribute.

Don’t feel like you tick every box? Studies show women are less likely to apply if they don’t meet 100% of a role’s criteria. We encourage your application even if you don’t meet every requirement. If you have questions, please email [emailprotected], and our team will be in touch.