Information Security Officer

Altitude-Recruitment Limited; England; Hybrid; GBP 50,000 - 60,000; Full time

Job summary

A leading technology solutions provider in Milton Keynes is seeking an experienced Information Security Officer to lead the security strategy and operations. The role involves managing compliance with ISO27001, PCI/DSS, and GDPR, along with overseeing security for SaaS products in a hybrid work environment. The ideal candidate has substantial experience in cloud security and strong communication skills to engage with internal teams and clients.

Benefits

Free breakfast

Fresh fruit

Healthy snacks

Qualifications

• Substantial information security experience preferably in SaaS/cloud.
• Proven track record of managing certifications.
• Strong understanding of cloud security.

Responsibilities

• Define security architecture and standards for SaaS platforms.
• Manage security environments across Azure and AWS.
• Ensure compliance with ISO27001, PCI/DSS, and GDPR.

Skills

Information security experience in SaaS/cloud

ISO27001 certification management

GDPR implementation experience

PCI/DSS compliance experience

Cloud security (Azure and/or AWS)

Communication skills

Tools

Various security technologies

Job description

Permanent
Based in Milton Keynes
£50,000 pa - £60,000 pa
Information Security Officer
Hybrid

Our client are a leading provider of software solutions for student accommodation, event management, catering, and residential services, they help institutions streamline operations, elevate customer experiences, and unlock their full potential.

With over 25 years of experience and trusted by more than 350 institutions worldwide, their software empowers universities and venues to run smarter, faster, and more collaboratively. From bustling campuses to dynamic corporate environments, their technology adapts to the rhythm of each organisation helping them thrive in a fast‑changing world.

They are more than just software. They are a team of passionate problem‑solvers, innovators, and collaborators who care deeply about their customers and each other. Their culture is built on empowerment, community, and continuous growth. They believe in giving people the tools, support, and freedom to do their best work and have fun while doing it.

Joining our client means being part of a purpose‑driven business where your ideas matter, your development is supported, and your impact is real. If you're ready to help shape the future of operational technology in education and events, we'd love to meet you.

An experienced Information Security Officer to lead security strategy, operations, and compliance. This is a hands‑on role combining strategic security architecture with operational security management and regulatory compliance oversight. The successful candidate will define security standards across our product portfolio, manage security environments, and serve as our central point for ISO27001, PCI/DSS, and GDPR compliance while supporting commercial teams with tender responses and client security assurance.

Core Responsibilities:

Strategic (30%)

• Define technical security architecture and standards across multi‑cloud SaaS platforms
• Embed security into product development lifecycle and roadmap planning
• Conduct threat modelling and risk assessments for new features and system changes
• Evaluate and recommend security technologies and tools

Operational (40%)

• Manage security environments across Azure and AWS infrastructure
• Coordinate security incident response and vulnerability remediation
• Oversee security monitoring, alerting, and detection capabilities
• Manage vulnerability assessment and penetration testing programs
• Maintain identity and access management controls

Compliance & Assurance (30%)

• Maintain ISO27001 certification and manage audit cycles
• Ensure PCI/DSS compliance for payment processing systems
• Manage GDPR compliance across all products and operations
• Complete HECVAT and security questionnaires for higher education tenders
• Support sales and customer success with security documentation and evidence
• Act as primary security contact for customers and prospects

Essential Requirements:

• Substantial information security experience in SaaS/cloud software environment (ISV or B2B software preferred)
• Proven track record managing ISO27001 certification and compliance
• Practical GDPR implementation experience in software products
• PCI/DSS compliance experience with payment processing systems
• Strong understanding of cloud security (Azure and/or AWS)
• Application security and secure development lifecycle knowledgeSecurity incident management and cross‑functional response coordination
• Excellent communication skills - able to translate technical security for commercial and executive audiences
• Experience supporting tender responses and client security assurance

Preferred:

• Professional certifications: CISSP, CISM, CISA, or equivalent
• Higher education sector experience
• Multi‑tenant SaaS architecture security experience
• DevSecOps and CI/CD security integration knowledge
• Security frameworks: NIST, CIS Controls, OWASP
• Multi‑jurisdictional data protection knowledge
• Enterprise sales cycle support experience

Key Attributes:

• Strategic thinker who can balance security with business needs
• Pragmatic approach to security implementation
• Detail‑oriented with strong organisational skills
• Collaborative and able to influence across teams
• Proactive in identifying risks and improvement opportunities
• Comfortable in fast‑paced, dynamic environment

Our client have created a welcoming office environment, with well‑stocked kitchens offering free breakfast, fresh fruit, hot and cold drinks, and a range of tuck shop goodies to keep you fuelled throughout the day. They are an equal opportunity employer, fostering diversity and committed to creating an inclusive environment for all employees.

Please let us know if we need to make reasonable adjustments to our process, please let us know about how we can best support you and make the adjustments that may be needed.

Altitude‑Recruitment Limited acting as an Employment Agency and Employment Business.