Information Security Officer

Naimuri; Salford; Hybrid; GBP 60,000 - 90,000; Full time

Benefits offered by this job

Flexible/Hybrid working options

Performance bonus

Company bonus

Pension matched 1.5x up to 10.5%

25 days annual leave

Job summary

Naimuri is seeking an Information Security Officer to bridge policy and hands-on security. You will report to the Head of Security and help maintain our security posture across governance, risk, and technical operations.

You will work in a mid-level capacity, shaping security policies, conducting audits, and coordinating incident response, with a culture that values practical risk management and collaboration. Hybrid, Salford-based role with UK customer-facing responsibilities.

Qualifications

• 2–4 years of information security or dual IT/security experience.
• Familiarity with cloud security (AWS, Azure or GCP).
• Understanding of UK Data Protection/GDPR and ISO 27001.
• Certifications such as CompTIA Security+, SSCP, or CISM are a plus.

Responsibilities

• Governance, risk & compliance management and framework alignment (e.g., Cyber Essentials Plus, ISO27001).
• Policy development and implementation in collaboration with Head of Security.
• Conduct internal audits and coordinate with external assessors.

Skills

InfoSec experience

Cloud security

Regulatory knowledge

Stakeholder communication

Tools

AWS

Azure

GCP

MDM solutions

Job description

At Naimuri, we provide the tech that protects. As our Information Security Officer, you will sit at the heart of our mission, bridging the gap between high-level compliance and hands-on technical security. You won’t just be writing policies; you’ll be ensuring they work in the real world. Reporting directly to the Head of Security, you will play a pivotal role in maintaining our reputation as a trusted partner to our customers.

The Balance: What You’ll Be Doing:

1. Governance, Risk & Compliance (The "Handoff")

Framework Management: Manage and evolve our security management systems, ensuring we remain aligned with security frameworks & standards, e.g. Cyber Essentials Plus & ISO27001.

Policy Evolution: Work with the Head of Security to develop and implement security policies that balance the need for security with the agility needed for a modern tech company.

Security Auditing: Conduct internal audits and coordinate with external assessors to ensure our security posture is ironclad.

Third-Party Risk: Assess the security of our supply chain and software vendors.

2. Technical Security & Operations (The "Hands-on")

Collaborative Defence: Work alongside the internal teams to harden our cloud environments (AWS/Azure) and ensure end-user devices (laptops, mobile) are configured securely.

Vulnerability Management: Run and remediate vulnerability scans; don’t just report the issues; help figure out how to fix them.

Incident Response: Be a key part of our incident response team, investigating alerts and refining our "playbooks" for future threats.

Identity & Access: Manage the lifecycle of software licenses and access controls, ensuring the principle of least privilege is always met.

Who You Are:

The Bridge

You can talk "tech" within a very technical company but also explain "risk" to a non-technical stakeholder.

Growth Mindset

You are at a mid-level stage in your career and are hungry to step up. You want a seat at the table where decisions are made.

Agile & Dynamic:

You thrive in fast-paced environments. You’d rather solve a problem than wait for a ticket to be assigned.

Security First

You have a natural "security mindset" you see the vulnerability in the process before it becomes a problem.

Your Toolkit (Requirements):

• Experience: 2-4 years in an Information Security or dual IT/Security role, ideally within a regulated industry or government-adjacent sector.
• Technical Knowledge: Familiarity with cloud platform security (AWS, Azure, or GCP) and MDM solutions for managing corporate devices.
• Regulatory Knowledge: Understanding of UK Data Protection/GDPR and ISO 27001.
• Certification: While not mandatory, certifications such as CompTIA Security+, SSCP, or CISM are a significant plus.

Why Naimuri?

People First: Expect a supportive environment that values your mental health and professional development.

High Impact: Your work directly supports the safety and security of the UK.

Culture: A vibrant Salford-based team with a "work hard, support each other" ethos.

Pay and benefits:

Naimuri pays competitively within the industry based on your role's base location rates. The salary for this position is dependent upon your experience. We assess seniority relative to the team at Naimuri during the interviewing process.

A full time working week is 37.5 hours and you have flexibility over when you give that time. We also offer part-time working, which can be discussed during the recruitment process.

Our core hours are 10:00am - 3:00pm and our office is open between 7:30 - 18:00, Monday to Friday.

We offer hybrid working where you can work from home for part of your working week with time on site being based on the needs of your assigned delivery and agreed Ways of Working for your team. We would expect that the successful candidate would be working an average of 3 days a week in the office. Depending on the project, you may also be required to travel to a local customer site or occasionally to other locations in the UK.

Benefits include:

• Flexible/Hybrid working options
• Performance bonus
• Company bonus
• Pension matched 1.5x up to 10.5%
• 25 days annual leave plus bank holidays.
• AXA group 1 medical cover
• Cycle to work scheme

Recruitment Process:

We are committed to building an inclusive, safe and supportive environment that allows everyone to do their best work, so we strongly encourage candidates of all different backgrounds and identities to apply. We can of course support any accessibility or neurodiversity requirements that you may need during the recruitment process.