Information Security Officer / Data Protection Officer

Recite Me; Gateshead; Hybrid; GBP 60,000 - 80,000; Full time

Job summary

A leading provider of cloud accessibility software in Gateshead is seeking an Information Security Specialist to oversee security practices and serve as the Data Protection Officer. The ideal candidate will manage compliance with ISO standards and facilitate training, ensuring a secure information security posture across the organization. Additionally, you will work on risk, incident management, and collaboration with external stakeholders. This dynamic role offers flexible working arrangements and a supportive team environment.

Benefits

25 Annual Days Holiday

Pension

Health Scheme

Death in Service

On-site Parking

Flexible Start Hours

Remote Working Options

Social Events

EV Scheme

Bike to Work Scheme

Qualifications

• Experience advising on information security and data protection.
• Ability to implement security procedures aligned with ISO27001.
• Knowledge of risk and incident management.

Responsibilities

• Oversee information security throughout the business.
• Act as the official data protection officer.
• Design and implement ISO-aligned security procedures.
• Manage Cyber Essentials+ compliance.

Skills

Excellent communication

Understanding of GDPR

Interpersonal skills

Writing skills

Project management

Job description

About Us

We’re building the future of accessibility at Recite Me - come and join our mission of achieving accessibility for all.

Recite Me is the leading provider of cloud accessibility and digital inclusion software. A true North-East SaaS success story, our flagship accessibility toolbar is used by thousands of organisations globally, including many household names, and we are on a journey towards our goal of accessibility for all.

About The Role

This is an opportunity to join a rapidly growing, super ambitious organisation in the tech-for-good space. Your role will involve a blended mix of information security and business continuity whilst being our official Data Protection Officer too.

Reporting to the head of technology and working closely with senior management you will be responsible for the security posture of the organisation. You will design and implement information security procedures which are aligned with ISO2700 as well as ensure full staff awareness of cyber security in a continuation of our awareness programme.

Additionally, you will also help us manage and maintain our existing Cyber Essentials+ compliance and help us work towards ISO27001 compliance in the future. We have already been working towards alignment with this. You will also work directly with internal and external stakeholders on client DPIA requirements.

Roles and Responsibility

• Oversee information security throughout the business
• Act as our official data protection officer
• Work with DevOps and SysOps teams to ensure maximum security of internal and external infrastructure and networks
• Work on our annual Cyber Essentials+ accreditation renewals
• Own and author our information security procedures aligned with ISO27001 and industry best practices
• Good knowledge of ISO27001
• Plan, implement and monitor internal staff training and awareness related to information security
• Work with clients to complete their data protection impact assessment (DPIA) requirements
• Own, manage and maintain a solid information security posture for the organisation
• We’re a global company so knowledge of legislation and information security best practice in our other jurisdictions (namely US and Australia) will be needed.
• Experience of risk and incident management
• Vendor management experience
• Work with internal and external stakeholders on our penetration testing and OWASP testing.

You’ll be an Information Security specialist - able to advise us, and implement processes and procedures as you find your way around Recite Me.

You’ll naturally feel a sense of responsibility for Recite Me’s security and data and ensure others in the organisation follow your steps.

This role is perfect for a self-starter with deep sector expertise and a willingness to get stuck in, making the role your own while keeping us secure.

You Will

• Be an excellent communicator
• Have a good understanding of GDPR
• Have excellent interpersonal communication skills including the ability to deliver training sessions
• Have good influencing skills, and be able to work across all levels within the organisation
• Have excellent written skills with experience of writing accessible Policies and Procedures
• Have a good understanding of the IT implications of GDPR, but you do not need to be an IT expert.
• Be able to work on a number of projects simultaneously in a rapidly changing and dynamic business environment

• 25 Annual days holiday plus bank holidays
• Pension
• Health Scheme
• Death in Service
• Opportunity to work with a close-knit, motivational team in an established global company
• Top-end tech
• On-site parking
• Flexible start (8am to 10am)
• Remote working allocation if based in the office – up to 2 days a week
• 10 days workcation
• Social events
• EV scheme
• Bike to work scheme