INFORMATION SECURITY OFFICER

Buckinghamshire New University; High Wycombe; Hybrid; GBP 39,000 - 43,000; Full time

Benefits offered by this job

Generous holiday entitlement

Hybrid working

Training & development opportunities

Contributory pension scheme

Free gym membership

Staff discounts

Job summary

Buckinghamshire New University is seeking an Information Security Officer to lead the ISMS, support incident management, and drive security governance across the university. This full-time, permanent role offers hybrid working at the High Wycombe campus with a focus on strengthening information security and compliance.

You will collaborate with the CIO Group and infrastructure teams to enhance controls, manage risk, and promote a strong security culture.

Qualifications

• No formal qualifications listed in the vacancy.

Responsibilities

• Provide governance and assurance to CIO Group and University by supporting information governance framework.
• Lead operational security activities including monitoring, threat detection, incident management and accreditation.
• Maintain ISMS, oversee risk registers, and ensure compliance with UK GDPR, Data Protection Act, ISO standards.

Job description

Information Security Officer (2041)

Information Security Officer

Full Time (37 hours per week) - Permanent - High Wycombe Campus / Hybrid working

Salary - £38,784 - £43-482

We’re not trying to fit in with the higher education status quo. We’re challenging it. We’re doing things differently – because our students, our staff, and our world need us to.

So this is an exciting moment to join us. We’re boldly reimagining what a university can be: a place rooted in social mobility, a community where difference is celebrated, and an institution that empowers people to become more than they thought possible.

Buckinghamshire New University is seeking a proactive and ambitious Information Security Officer to help shape and strengthen our information security and compliance programme. Working within the Information Assurance team, you will play a key role in protecting the University’s information assets, managing security risks, and embedding a strong security culture across the organisation.

You will lead the continual improvement of our Information Security Management System (ISMS), support the management of security incidents, drive compliance activities, and develop information security policies, standards and controls. You will also contribute to strategic projects, maintain oversight of information security risks and assets, and provide expert advice to colleagues to ensure security is embedded in decision-making and service delivery.

This is an opportunity to make a meaningful impact in a university committed to transforming lives through education. We welcome applications from all backgrounds and are committed to an inclusive and supportive workplace.

What we offer:

• a generous holiday entitlement (35/30 days per annum, plus bank holidays & closure days)
• Hybrid working (dependent on business needs)
• training & development support opportunities
• contributory pension scheme
• free gym membership for our on-site gym
• a range of staff discounts with major retailers.

If you have the qualities and attributes representative of the University’s values and ambition, we would be delighted to hear from you.

For further information about this role please contact [e-mail]

We are committed to promoting an inclusive and diverse workplace and aim to continue building an environment where everyone thrives and can be themselves.

Please let us know if you require any adjustments or support during the recruitment process. We are happy to discuss any reasonable adjustments that would enable you to perform to the best of your abilities in your role. Please reach out to [e-mail] if you have any specific needs or if you would like more information on how we can support you

We ensure that our interview/shortlisting Chairs complete the relevant e-learning and/or inclusive recruitment training.

If you’re considering using AI to support your application, we encourage you to question the value it adds. The use of AI tools sometimes erodes authenticity and prevents us from being able to assess the real you. We strongly recommend you prepare your application using your own skills and knowledge and that AI is only used for the purpose of review.

Closing Date: Friday 02 October 2026

Interview Date: Monday 12 October 2026

If you are invited to interview for this role, you will need to provide evidence of your eligibility to work in the UK and if on a visa, current visa and status. Sponsorship is dependent on the salary level of the position.

BNU is a Disability Confident employer and as such you will be given the opportunity to declare a disability as part of the application process.

Job Description

Main Duties & Responsibilities of the role:

• Provide governance and assurance to the wider CIO Group and University by supporting the Head of Information Assurance in developing, delivering and auditing against the information governance framework.
• Work closely with the Infrastructure and Operations Teams to review the existing global architecture (including infrastructure and cloud services), identify design gaps, and recommend enhancements to cyber security controls and implement any agreed improvements so that the University’s data and information systems are secured.
• Serve as an internal information and cyber security subject matter expert and lead operational security activities including security monitoring, threat detection, security event management, endpoint security, identity security and oversight of managed security service providers.
• Develop, validate, maintain and regularly test all information security, cyber security, disaster recovery and business continuity plans, process and procedures.
• In collaboration with the CIO assist with the design and development of the cyber security strategy and recommendations for new cybersecurity systems.
• Work with the wider CIO Group to execute regular vulnerability assessments and coordinate external penetration testing to identify data protection, cyber security and other compliance risks and present recommendations for mitigating the risks in the immediate term and provide guidance on plans to manage the risk long term.
• Maintain the University's information security risk register, ensuring risks are assessed, tracked, reviewed and reported to appropriate governance forums. Assist departments with risk assessments and developing appropriate management and mitigation strategies to avoid reputational and financial damage to the University.
• Lead all investigations related to security incidents, including analysis of impact, resolution, cause, prevention and subsequent remediation as required by the University’s Incident Response procedures. This includes ensuring there is adequate out of hours and emergency incident response cover.
• Develop and monitor security KPIs to assess the effectiveness of controls and present regular security reporting, risk assessments and assurance updates to leadership, governance committees and external auditors.
• Take advice from our third-party security partners and maintain a high level of knowledge about information, cyber security and privacy regulations, new security risks and protocols, and new security technology solutions.
• Assist in the development, review, and consultation of information and cyber security policies, standards, and guidelines in line with industry best practices and the University’s needs, ensuring that compliance is enforced through the satisfactory completion of regular internal and external audits.
• Support the development and maintenance of the University’s ISMS, ensuring compliance with legislation e.g. Data Protection Act 2018 and UK GDPR; standards, such as ISO 27001, ISO 22301 and PCI-DSS; and frameworks including Cyber Essentials.
• Help create a positive security culture across the University through engagement activities, awareness campaigns, training and leadership engagement by promoting the University’s information and cyber security policies and procedures to all staff and serving as the primary point of contact for associated issues across the institution.
• Deliver the University’s information security awareness programme to promote awareness of the processes, policies and technical solutions in place to protect the confidentiality, integrity and availability of data by maintaining training materials, promoting participation, and monitoring its effectiveness.
• Perform line management responsibilities including recruitment and selection, performance management, professional development, motivation, health and safety, and wellbeing.
• Comply with relevant legislative and other requirements (e.g., the Data Protection Act 2018 and UK GDPR; Health and Safety; UKVI; and Equality and Diversity) in all working practices
• Perform such other duties temporarily or on a continuing basis, as may reasonably be required.

Behavioural INDICATORS

The BNU Behaviours Framework (BBF) is a framework for all University staff that sets out the key behaviours that exemplify the values and ethos of the University. . The three key behavioural indicators for this post are as follows: