InfoSec Officer: GRC, Identity & Architecture

Westcoast; Reading; Hybrid; GBP 52,000 - 58,000; Full time

Benefits offered by this job

Salary up to £58,000

25 days holiday

Employee referral bonuses

Gym facilities at Theale site

Job summary

Westcoast, headquartered near Reading, is seeking an Information Security Officer to govern Group security controls and external stakeholder assurance. You will focus on governance, architecture, and identity management, supported by a security operations and engineering team to deliver cyber resilience and compliance.

You will engage with customers, suppliers, auditors, and external groups, driving security improvements and participating in a security transformation program to deliver value and

Qualifications

• Minimum of 3 years' experience in a relevant full-time security position.
• Security professional qualification such as CISSP, CISM, CCSP, CISA, ISO27001 Lead Implementor/Auditor, CEH or equivalent recognized Information Security discipline.
• Knowledge of ISO27001, NIST, CIS Controls and PCI-DSS compliance.
• Understanding of HM Government security standards (e.g. Security Policy Framework, Cyber Essentials Plus).
• Experience managing security incidents and investigations including APT threats.
• Knowledge of specialized security tools (e.g., Palo Alto, Tenable, Defender, Sentinel).
• Cloud computing experience from multiple vendors (O365, Azure, AWS, Google).

Responsibilities

• Security assessment and management of Westcoast hosted and cloud infrastructure, networks, endpoints, and applications and data against threat models.
• Drive implementation of identity good practice, including single sign-on and federated services.
• Collaborate with Technical Design Board on security architecture and patterns.
• Stewardship of information security risks with the Business Assurance team, focusing on crown jewel systems.
• Ensure data protection impact assessments are managed for technical risks.
• Record and manage policy exceptions and risks on risk registers.

Skills

GRC

Security architecture

Identity management

Threat modeling

Compliance

Vendor management

Cloud security

Education

CISSP / CISM / CCSP / CISA

ISO27001 Lead Implementor/Auditor

CEH

NCSC-certified degree

Tools

Palo Alto

Tenable

Microsoft Defender

Sentinel

Job description

Westcoast, headquartered near Reading, is seeking an Information Security Officer to govern Group security controls and external stakeholder assurance. You will focus on governance, architecture, and identity management, supported by a security operations and engineering team to deliver cyber resilience and compliance.

You will engage with customers, suppliers, auditors, and external groups, driving security improvements and participating in a security transformation program to deliver value and