Senior Information Security & GRC Architect

Westcoast Ltd.; Nottingham; Presencial; GBP 52.000 - 64.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Salary up to £58,000

25 days holiday

Employee referral bonuses

Gym at Theale site

Wellbeing services

Descripción de la vacante

Westcoast Ltd. is hiring an Information Security Officer to lead security controls across the group, with a focus on external stakeholders and compliance. You will work in architecture, IAM, and governance, supported by a security operations and engineering team.

The role involves security assessments, risk stewardship, and implementing best practices such as SSO. Candidates with CISSP/CISM/CCSP/CISA or ISO27001 expertise are preferred, with cloud security experience across O365, Azure, AWS, and

Formación

• Minimum of 3 years’ experience in a relevant full-time security position.
• Security professional qualifications such as CISSP, CISM, CCSP, CISA, ISO27001 Lead Implementor/Auditor, CEH or equivalent.
• Experience with ISO27001, NIST, CIS Controls and PCI-DSS compliance.
• Knowledge of HM Government security standards (Security Policy Framework, Cyber Essentials Plus).
• Experience handling security incidents and investigations including APT threat actors.

Responsabilidades

• Security assessment and management of Westcoast hosted and cloud infrastructure, networks, endpoints, and applications against threat models.
• Drive the implementation of identity best practices, including single sign-on and federated services.
• Contribute to security architecture and pattern development with the Technical Design Board.
• Steward information security risks with the Business Assurance team, focusing on crown jewel systems.
• Ensure Data Protection Impact Assessments manage technical risks.
• Record and manage policy exceptions and risks on risk registers.

Conocimientos

GRC

Security architecture

Identity management

Governance & compliance

Security operations

Educación

CISSP / CISM / CCSP / CISA or equivalent

NCSC-certified degrees

Herramientas

Palo Alto

Tenable

Defender

Sentinel tools

Descripción del empleo

Westcoast Ltd. is hiring an Information Security Officer to lead security controls across the group, with a focus on external stakeholders and compliance. You will work in architecture, IAM, and governance, supported by a security operations and engineering team.

The role involves security assessments, risk stewardship, and implementing best practices such as SSO. Candidates with CISSP/CISM/CCSP/CISA or ISO27001 expertise are preferred, with cloud security experience across O365, Azure, AWS, and