Information Security Officer

JR United Kingdom; City Of London; On-site; GBP 50,000 - 80,000; Full time

Job summary

A leading financial institution seeks an Information Security Officer in London to enhance its cyber security posture. The ideal candidate will have extensive banking experience, a strong background in Information Assurance, and relevant qualifications like CISSP or CISM. This permanent role includes managing risks, improving security strategies, and ensuring compliance with regulations.

Qualifications

• 5+ years in Information Assurance or regulated UK sector.
• Strong knowledge of NIST CSF, SOC2, ISO 27K, PCI DSS, GDPR.
• Experience in Cyber Incident Response function.

Responsibilities

• Develop and maintain information security governance documents.
• Provide regular updates to governance committee.
• Collaborate with teams to integrate security measures.

Skills

Analytical skills

Technical acumen

Knowledge of Cyber Incidents

Strong knowledge in Information/Cyber Security

Education

Relevant Information Security qualification (degree, CISSP, CISM)

Tools

Information Security tools

Job description

Social network you want to login/join with:

Information Security Officer, london (city of london)

col-narrow-left

Client:

Location:

london (city of london), United Kingdom

Job Category:

Other

-

EU work permit required:

Yes

col-narrow-right

Job Views:

3

Posted:

16.06.2025

Expiry Date:

31.07.2025

col-wide

Job Description:

Information Security Officer - Banking

London

Permanent

MUST HAVE PREVIOUS BANKING EXPERIENCE TO BE CONSIDERED

Job purpose

The Information Security Officer works within the Information Security Office of the Bank to ensure all information and cyber risks are identified, analysed, mitigated, and monitored, ensuring the smooth operation of the Bank. Where improvements are needed, the ISO will contribute to the Information/Cyber Security Strategy and Roadmap, enabling both defence-in-depth and, where appropriate, defence-in- breadth to safeguard normal banking operations.

The ISO will collaborate closely with Security Engineering, Security Operations, and Business Resilience Teams across the bank

The ISO addresses external attacks, mitigates zero-day vulnerabilities, and identifies security operating flaws. It ensures that Executive Management's risk targets are met and contributes to the continual improvement of the Bank's Cyber Assurance Framework, enhancing the control measures that defend the Bank.

Key Responsibilities

• Collaborate with Information SecurityEngineering and Operations Teams to integrate security measures into business processes.
• Advise business units on security-related issuesand initiatives.
• Oversee Second Line projectactivities to evaluateinformation security risksfor new projects, products, systems, and other significant changes within the bank.
• Supervise the resolution of risks and issues identified during audits or external assessments.
• Develop, review, and maintaininformation security governance documents, including policies, standards, frameworks, and procedures.
• Create and deliver Information/Cyber Security Awareness training, educating NBKI staff on best practices.
• Maintain comprehensive records and documentation of ISO activities.
• Provide regular updates and reports to the Information Security Management System (ISMS) governance committee.
• Manage internal and externalinformation security requirements, liaising with relevant parties.
• Support the ISO in annual budgetingand planning.
• Participate in Cyber IncidentResponse as part of the ISO Team.
• Coordinate with vendors to evaluate new technologies and lead Proof of Conceptevaluations as needed.

Evaluate, recommend, and implement cloud security controlsin line with emerging technologies and practices across group entities.

Qualifications,Experience

• Experience in Information Assurance and/or working withina highly regulatedUK sector for at least five years.
• Relevant Information Security qualification (degree, CISSP, or CISM) obtainedor in progress.
• Strong technical acumen with broad knowledgeacross Information/Cyber Security, Software Development, and IT systems.
• Working knowledge of NIST CSF.
• Willingness to learn and expand skillsin both Information Security and Financial Services.
• Ability to work autonomously and flexibly withina team, contributing to an improved Bank security posture.
• Analytical skillsto interpret data and provideinsights into threatsfacing the bank.
• Awareness of common Cyber Incidents and Security breaches(OWASP).
• Knowledge or experience in SOC2, ISO 27K, PCI DSS and GDPR.
• Previous experience working withinan organisations Cyber Incident Responsefunction.

Hands on experience with Information Securitytools.

Please contact me if you would like to discuss the role. [emailprotected] or 0207 337 0045