Information Security Officer

Westcoast; Reading; Hybrid; GBP 52,000 - 58,000; Full time

Benefits offered by this job

Salary up to £58,000

25 days holiday

Employee referral bonuses

Gym facilities at Theale site

Job summary

Westcoast, headquartered near Reading, is seeking an Information Security Officer to govern Group security controls and external stakeholder assurance. You will focus on governance, architecture, and identity management, supported by a security operations and engineering team to deliver cyber resilience and compliance.

You will engage with customers, suppliers, auditors, and external groups, driving security improvements and participating in a security transformation program to deliver value and

Qualifications

• Minimum of 3 years' experience in a relevant full-time security position.
• Security professional qualification such as CISSP, CISM, CCSP, CISA, ISO27001 Lead Implementor/Auditor, CEH or equivalent recognized Information Security discipline.
• Knowledge of ISO27001, NIST, CIS Controls and PCI-DSS compliance.
• Understanding of HM Government security standards (e.g. Security Policy Framework, Cyber Essentials Plus).
• Experience managing security incidents and investigations including APT threats.
• Knowledge of specialized security tools (e.g., Palo Alto, Tenable, Defender, Sentinel).
• Cloud computing experience from multiple vendors (O365, Azure, AWS, Google).

Responsibilities

• Security assessment and management of Westcoast hosted and cloud infrastructure, networks, endpoints, and applications and data against threat models.
• Drive implementation of identity good practice, including single sign-on and federated services.
• Collaborate with Technical Design Board on security architecture and patterns.
• Stewardship of information security risks with the Business Assurance team, focusing on crown jewel systems.
• Ensure data protection impact assessments are managed for technical risks.
• Record and manage policy exceptions and risks on risk registers.

Skills

GRC

Security architecture

Identity management

Threat modeling

Compliance

Vendor management

Cloud security

Education

CISSP / CISM / CCSP / CISA

ISO27001 Lead Implementor/Auditor

CEH

NCSC-certified degree

Tools

Palo Alto

Tenable

Microsoft Defender

Sentinel

Job description

Career Opportunities: Information Security Officer (1703)

Requisition ID1703-Posted01/10/2026- Job Location (1) - Posting Country (1) - Job Function (1)

At Westcoast, we take pride in distributing some of the most renowned global IT brands to resellers, retailers, and organizations across the UK and beyond. As an innovative and inclusive company, we thrive on teamwork and the diverse talents of our people. We invite you to turn your passion into a rewarding career with us!

Our main office is our Theale site near Reading, with other sites based at Andover and Nottingham. Ideally you will live in commuting distance of Theale or Andover.

The Job Role

In this role you will be responsible the Group's security controls and solutions, ensuring control effectiveness against both threats, and a changing IT landscape. This role will work alongside other Information Security Officers but will have a primary focus on external stakeholders and compliance.

Working primarily in the disciplines of Architecture and consultancy, Identity and Access Management and Governance, Risk and Compliance you will be supported by a security operations and engineering team to deliver security, business value and cyber resilience.

This role will involve working with customers, suppliers, auditors, and other outside technical interest groups to demonstrate the assurance in Westcoast's control framework and establish an ongoing trust.

Additionally, you will support a security transformation program playing an essential role in delivering initiatives.

Your Day-to-Day Responsibilities Will Include:

• Security assessment and management of Westcoast hosted and cloud infrastructure, networks, endpoints, and applications and data against threat models. Including developing testing and remediation plans with tracking.
• Working with system owners to drive the implementation of identity good practice and in particular single sign on and federated services
• Working with the Technical Design Board on developing security architecture and patterns.
• Stewardship of information security risks working with the Business Assurance team on reporting. Focusing on crown jewel systems ensuring risk posture and cyber resiliency needs.
• Ensuring technical risks form Data Protection Impact Assessments are managed
• Ensure policy exceptions and risks are recorded and managed on risk registers.

Is this the role for you?

We are looking for someone who can shape change and has an experience in GRC, security architecture, consultancy and identity management. Our ideal candidate will have a focus on improvement, a passion security and strong technical skills.

To be successful in this role you will have some of the following skills and experience and the desire to develop in other areas:

• Minimum of 3 years' experience in a relevant full-time security position
• A security professional qualification such as CISSP, CISM, CCSP, CISA, ISO27001 Lead Implementor/Auditor, CEH or equivalent recognized Information Security discipline Degree: NCSC-certified degrees - NCSC.GOV.UK
• Previous experience and knowledge of security frameworks i.e. ISO27001, NIST, CIS Controls and PCI-DSS compliance
• An understanding of HMG security standards (e.g. Security Policy Framework, Cyber Essentials Plus, Cloud security principles etc.).
• Experience of managing Security incident and investigations including APT threat actors
• Some knowledge of specialized security tools would be highly desirable (e.g. Palo Alto, Tenable, Defender, Sentinel tools). would be very beneficial
• Cloud Computing experience from multiple vendors (O365, Azure, AWS, Google, etc.)

What’s in It for You?

This is a fantastic opportunity to immerse yourself in the IT industry, build lasting relationships, and grow with a Sunday Times Top Track 100 company.

• Growth Opportunities: We offer training and development opportunities to help you reach your full potential. Whether it's funded apprenticeships, work-based studies, or professional qualifications, we've got you covered.
• Generous Benefits Package: A salary of up to £58,000 depending on experience. Enjoy 25 days of holiday, employee referral bonuses, perks and discounts. (Theale only - New fully equipped gym available 24/7).
• Wellbeing Support: Access to Westcoast Wellbeing services including mental health counselling, virtual GP services, physiotherapy, life insurance, eye care schemes, and more.
• Community & Connection: Our teams enjoy social and charitable events throughout the year, fostering a strong sense of belonging.

What’s Next?

Please note: Due to the high volume of applications, we may not be able to provide individual feedback for every candidate. If you don’t hear from us within 14 working days, kindly note that we have chosen to pursue other candidates for this opportunity. We appreciate your interest and encourage you to explore future opportunities with us.