IT Security Officer – Hybrid, Risk & Governance

Proactive Appointments Ltd.; West of England; Hybride; GBP 60 000 - 90 000; Plein temps

Avantages offerts par ce poste

Bonus

Pension

Hybrid working

Résumé du poste

Proactive Appointments Ltd. is seeking an experienced IT Security Officer to join a financial services organisation in the UK.

You will lead risk-based security assurance activities, manage third-party assessments, identify vulnerabilities and drive remediation, while strengthening information security governance and controls across the business. The role requires 3+ years in information security or a highly regulated sector, knowledge of NIST CSF 2.0 and ISO 27001, and a qualification (degree,

Qualifications

• 3+ years’ experience in Information Security or a highly regulated UK sector.
• Knowledge of NIST CSF 2.0, ISO 27001 and information security frameworks.
• Experience in security risk assessments, audits, governance and vulnerability remediation.
• Strong technical understanding of cybersecurity, IT systems, and software development.
• Information Security qualification (degree, CISSP or CISM), achieved or in progress.
• Experience with PCI DSS, SWIFT, DLP or cyber incident response is advantageous.
• Excellent stakeholder management, communication and analytical skills.

Responsabilités

• Lead risk-based security assurance activities and manage third-party assessments.
• Identify vulnerabilities and drive remediation across the organisation.
• Strengthen information security governance and controls throughout the business.

Connaissances

Information Security

Risk management

Security governance

Communication

Analytical skills

Formation

Information security qualification (degree, CISSP or CISM)

Outils

NIST CSF 2.0

ISO 27001

PCI DSS

SWIFT

DLP

Description du poste

Proactive Appointments Ltd. is seeking an experienced IT Security Officer to join a financial services organisation in the UK.

You will lead risk-based security assurance activities, manage third-party assessments, identify vulnerabilities and drive remediation, while strengthening information security governance and controls across the business. The role requires 3+ years in information security or a highly regulated sector, knowledge of NIST CSF 2.0 and ISO 27001, and a qualification (degree,