Information Security Officer

Recognise Bank; Greater London; Hybrid; GBP 70,000 - 100,000; Full time

Benefits offered by this job

Competitive Time Off

Work From Anywhere (up to 6 weeks/year

Learning & Development

Hybrid Working (3 in-office, 2 remote)

Private Medical Care with Vitality

Enhanced Pension Scheme

Parental Leave Support

Discretionary Company Bonus

Job summary

Recognise Bank is seeking an Information Security Officer (ISO) to support growth with robust security controls and compliant practices. Working with the CRO and DPO, you will shape policies, standards and control frameworks while collaborating with First Line teams to assure the effectiveness of the security environment.

You will engage with the Executive Team and Board, driving increased information security awareness and a culture of responsible risk management across the bank.

Qualifications

• A minimum of 5 years’ experience in a second line information security, GRC or data protection role within a UK regulated financial services firm.
• Working knowledge of PRA and FCA expectations, UK GDPR, PECR and operational resilience requirements.
• Experience running security awareness programmes, including phishing simulations and e-learning platforms.
• Working knowledge of Microsoft Purview 9DLP < Insider Risk management, Communication Compliance) and the wider Microsoft E5 security stack.
• Experience responding to internal and external audits and drafting Board and committee papers.
• Experience of third-party security due diligence and supplier risk assessments
• Relevant certifications such as CISSP, CISM, CRISC, CIPP/E or ISO 27001 Lead Auditor (desirable).

Responsibilities

• Security Governance, Policy & Reporting oversight.
• Cyber Security management and risk reduction.
• Security Awareness & Training programs.
• Data Protection & Privacy compliance.
• IT Infrastructure oversight and resilience.
• Incident management and operational resilience.

Skills

Security governance

Cybersecurity

Security awareness

Data protection

Audit readiness

Third-party risk

Education

CISSP/CISM/CRISC or ISO 27001 Lead Auditor (desirable)

Tools

Microsoft Purview 9DLP

Microsoft E5 security stack

Job description

We are Recognise Bank; a modern business bank built to support the UK’s SMEs with tailored lending and savings solutions. Founded in 2017 by experienced business owners, we set out to challenge traditional banking by offering more flexibility, understanding, and practical support to help businesses thrive. Since receiving our banking licence in 2021, we’ve built a loyal customer base and a strong, diverse team that puts people first.

Our vision is building stronger futures with bespoke financial solutions. We understand that no two financial needs are the same, which is why we work closely with UK SMEs and individuals to unlock potential others often overlook. Through smart, flexible lending and savings products, we’re here to build and grow stronger futures for lasting success.

Our values shape how we work and grow together:

Can do, will do: We take ownership, solve problems, and adapt as our customers’ needs evolve.

Be brilliant: We show up with curiosity and energy, always striving for better.

Do the right thing: We act with integrity, responsibility, and care in everything we do.

Make a difference: We focus on impact, helping our customers, colleagues, and communities succeed.

About the role

Sitting in our 2nd Line Function, the Information Security Officer (ISO) plays a pivotal role in helping the bank achieve its growth ambitions in a complaint and secure manner. Working with the Chief Risk Officer and Data Protection Officer the role holder will ensure the bank has robust and proportionate policies, standards and control frameworks in place. Working with 1st Line colleagues from across the bank, but particularly those responsible for Information Security, IT, Operational Resilience and the management, storage and use of data, will provide independent assurance of the efficacy of the control environment and support the delivery of projects and transformational change. A trusted expert and critical friend, the individual will be responsible for working directly with the bank’s Executive Team and Board to ensure they have a transparent understanding of the bank’s risk posture and responsible for increasing Information Security awareness, skills and understanding across the bank.

Key Responsibilities

• Security Governance, Policy & Reporting
• Cyber Security
• Security Awareness & Training
• Data Protection & Privacy
• IT Infrastructure Oversight
• Incident Management & Operational Resilience

Corporate Responsibilities

• Read and follow all relevant company policies and procedures
• Adhere to all risk-related responsibilities applicable to your role, as set out in the Risk Management Policy
• Abide by all compliance and financial crime related policies, procedures and reporting obligations applicable to your role
• A Material Risk Taker for the bank you will need to act in accordance with regulatory expectations of a Certified individual

Required Skills & Experience

• A minimum of 5 years’ experience in a second line information security, GRC or data protection role within a UK regulated financial services firm.
• Working knowledge of PRA and FCA expectations, UK GDPR, PECR and operational resilience requirements.
• Experience running security awareness programmes, including phishing simulations and e-learning platforms.
• Working knowledge of Microsoft Purview 9DLP< Insider Risk management, Communication Compliance) and the wider Microsoft E5 security stack.
• Experience responding to internal and external audits and drafting Board and committee papers.
• Experience of third-party security due diligence and supplier risk assessments
• Relevant certifications such as CISSP, CISM, CRISC, CIPP/E or ISO 27001 Lead Auditor (desirable).

At Recognise Bank, we're building more than a bank — we’re creating a culture where people feel empowered to make a difference, supported to be brilliant with a can do will do attitude, and trusted to do the right thing.

We believe that when our people thrive, so do our customers. That’s why we invest in an environment that reflects our values and supports your growth, flexibility, and wellbeing.

Here’s what you can look forward to:

Competitive Time Off – Generous annual leave plus bank holidays to rest, recharge, and enjoy life outside of work.

Work From Anywhere – Up to 6 weeks per year to work remotely from anywhere in the world.*

Learning & Development – Tailored training and support to grow your skills and achieve your professional goals.

Hybrid Working – To support your work-life balance, we offer a hybrid working model with 3 days in the office and 2 days remote.**

Private Medical Care with Vitality – Comprehensive healthcare coverage to keep you healthy.

Enhanced Pension Scheme – Helping you plan and save for a secure future.

Maternity, Paternity & Adoption Pay – Supporting you and your family during important life moments.

Discretionary Company Bonus – Rewarding your contribution to our shared success.

If you're curious, driven, and ready to be part of something meaningful — where your ideas matter, your growth is supported, and your work makes a real impact — then we’d love to hear from you.

Subject to company policy.

This arrangement may vary during the induction period.