Information Security Officer

Recognise Bank; Greater London; Hybrid; GBP 90,000 - 130,000; Full time

Benefits offered by this job

Competitive Time Off

Work From Anywhere

Learning & Development

Hybrid Working

Private Medical Care with Vitality

Enhanced Pension Scheme

Maternity, Paternity & Adoption Pay

Discretionary Company Bonus

Job summary

Recognise Bank, a modern business bank for UK SMEs, seeks an Information Security Officer to work with the CRO and DPO to maintain robust policies and control frameworks. You will provide independent assurance of the control environment and support projects across the bank.

In the Second Line role, you will drive security governance, data protection, incident management and resilience while promoting security awareness.

Qualifications

• . Minimum of 5 years in a second line information security, GRC or data protection in UK regulated financial services.
• . Knowledge of PRA/FCA expectations, UK GDPR, PECR and operational resilience.
• . Experience running security awareness programmes, phishing simulations and e-learning.
• . Auditing experience and the ability to draft Board/committee papers.
• . Experience with third‑party security due diligence and supplier risk assessments

Responsibilities

• Security Governance, Policy & Reporting
• Cyber Security
• Security Awareness & Training
• Data Protection & Privacy
• IT Infrastructure Oversight
• Incident Management & Operational Resilience

Skills

Information security

GRC

Data protection

Auditing

Security awareness

Regulatory knowledge

Phishing simulations

Audit reports

Vendor risk assessments

Education

CISSP

CISM

CRISC

CIPP/E

ISO 27001 Lead Auditor

Tools

Microsoft Purview 9DLP Insider Risk

Microsoft 365 E5 security stack

Job description

We are Recognise Bank; a modern business bank built to support the UK’s SMEs with tailored lending and savings solutions. Founded in 2017 by experienced business owners, we set out to challenge traditional banking by offering more flexibility, understanding, and practical support to help businesses thrive. Since receiving our banking licence in 2021, we’ve built a loyal customer base and a strong, diverse team that puts people first.

Our vision is building stronger futures with bespoke financial solutions. We understand that no two financial needs are the same, which is why we work closely with UK SMEs and individuals to unlock potential others often overlook. Through smart, flexible lending and savings products, we’re here to build and grow stronger futures for lasting success.

Our values shape how we work and grow together:

Can do, will do: We take ownership, solve problems, and adapt as our customers’ needs evolve.

Be brilliant: We show up with curiosity and energy, always striving for better.

Do the right thing: We act with integrity, responsibility, and care in everything we do.

Make a difference: We focus on impact, helping our customers, colleagues, and communities succeed.

About the role

Sitting in our 2nd Line Function, the Information Security Officer (ISO) plays a pivotal role in helping the bank achieve its growth ambitions in a complaint and secure manner. Working with the Chief Risk Officer and Data Protection Officer the role holder will ensure the bank has robust and proportionate policies, standards and control frameworks in place. Working with 1st Line colleagues from across the bank, but particularly those responsible for Information Security, IT, Operational Resilience and the management, storage and use of data, will provide independent assurance of the efficacy of the control environment and support the delivery of projects and transformational change. A trusted expert and critical friend, the individual will be responsible for working directly with the bank’s Executive Team and Board to ensure they have a transparent understanding of the bank’s risk posture and responsible for increasing Information Security awareness, skills and understanding across the bank.

Key Responsibilities

• Security Governance, Policy & Reporting
• Cyber Security
• Security Awareness & Training
• Data Protection & Privacy
• IT Infrastructure Oversight
• Incident Management & Operational Resilience

Corporate Responsibilities

• Read and follow all relevant company policies and procedures
• Adhere to all risk-related responsibilities applicable to your role, as set out in the Risk Management Policy
• Abide by all compliance and financial crime related policies, procedures and reporting obligations applicable to your role
• A Material Risk Taker for the bank you will need to act in accordance with regulatory expectations of a Certified individual

Required Skills & Experience

• A minimum of 5 years’ experience in a second line information security, GRC or data protection role within a UK regulated financial services firm.
• Working knowledge of PRA and FCA expectations, UK GDPR, PECR and operational resilience requirements.
• Experience running security awareness programmes, including phishing simulations and e-learning platforms.
• Working knowledge of Microsoft Purview 9DLP< Insider Risk management, Communication Compliance) and the wider Microsoft E5 security stack.
• Experience responding to internal and external audits and drafting Board and committee papers.
• Experience of third-party security due diligence and supplier risk assessments
• Relevant certifications such as CISSP, CISM, CRISC, CIPP/E or ISO 27001 Lead Auditor (desirable).

At Recognise Bank, we're building more than a bank — we’re creating a culture where people feel empowered to make a difference , supported to be brilliant with a can do will do attitude, and trusted to do the right thing.

We believe that when our people thrive, so do our customers. That’s why we invest in an environment that reflects our values and supports your growth, flexibility, and wellbeing.

Here’s what you can look forward to:

• Competitive Time Off – Generous annual leave plus bank holidays to rest, recharge, and enjoy life outside of work.
• Work From Anywhere – Up to 6 weeks per year to work remotely from anywhere in the world.*
• Learning & Development – Tailored training and support to grow your skills and achieve your professional goals.
• Hybrid Working – To support your work-life balance, we offer a hybrid working model with 3 days in the office and 2 days remote.**
• Private Medical Care with Vitality – Comprehensive healthcare coverage to keep you healthy.
• Enhanced Pension Scheme – Helping you plan and save for a secure future.
• Maternity, Paternity & Adoption Pay – Supporting you and your family during important life moments.
• Discretionary Company Bonus – Rewarding your contribution to our shared success.

If you're curious, driven, and ready to be part of something meaningful — where your ideas matter, your growth is supported, and your work makes a real impact — then we’d love to hear from you.

*Subject to company policy.

**This arrangement may vary during the induction period.