Information Security Officer

TN United Kingdom; Bristol; Hybrid; GBP 50,000 - 80,000; Full time

Job summary

A leading company in the UK is seeking an experienced Cloud Information Security Officer to enhance their information security management system. This role involves monitoring security incidents, ensuring compliance with laws, and fostering a culture of security awareness. The position is hybrid, requiring office attendance two days a week.

Responsibilities

• Proactively monitor, identify, respond to, and resolve security incidents.
• Align information security strategy with business goals.
• Ensure compliance with local and international laws.

Job description

Social network you want to login/join with:

Contract type:Full-time & permanent

Hybrid, office 2 days per week

We are on the lookout for an experienced Cloud Information Security Officer to help drive forward our commitment to providing a world-class information security management system for our products and services that protects both SBS and our customers' interests. This role will report to the Security, Risk and Compliance Lead.

What will the role involve?

1. Proactively monitoring, identifying, responding to, and resolving security incidents.
2. Aligning information security strategy with business goals and objectives.
3. Ensuring compliance with relevant local and international laws and internal policies.
4. Fostering a culture of information security awareness and continuous improvement.
5. Driving the adoption of best practices in data protection and cybersecurity.
6. Maintaining a strong relationship with internal teams and our customers by demonstrating an understanding of and executing best practices within information security.
7. Updating and maintaining information security policies and procedures, and supporting operational collateral.
8. Managing internal and external audit events (e.g., SOC1, ISO 27001) and customer information security requests to demonstrate compliance with industry best practices and contractual obligations.
9. Remaining up-to-date with the latest threats and vulnerabilities to ensure operational tools and processes are in place and up to date.
10. Participating in the identification, assessment, registration, and treatment of information security risks.