Senior Information Security Leader: ISMS, GRC & Compliance

Maxwell Bond; Reading; Hybrid; GBP 42,000 - 70,000; Full time

Benefits offered by this job

Hybrid work model

Job summary

Maxwell Bond is seeking a Principal Information Security Officer in Reading for a hybrid, permanent role. You will lead security strategies, oversee ISMS, and act as deputy to the Director of Cyber Security, ensuring governance, risk and compliance across the business.

You will bridge strategic security requirements with practical implementation, guiding technical teams and driving improvements across security controls and cloud/infrastructure environments.

Qualifications

• Senior information security leadership experience.
• Proven track record in GRC and security architecture.
• Strong understanding of ISO 27001, PCI-DSS, NIST/CIS.

Responsibilities

• Act as the senior Information Security SME across GRC, ISMS, security architecture and compliance.
• Support the Director of Cyber Security with the delivery of the wider security strategy and improvement plan.
• Provide leadership and technical oversight to Information Security Officers.
• Lead significant security projects from assessment through implementation.
• Own and drive improvements to ISMS and security controls.
• Lead security assessments across infrastructure, networks, endpoints, and cloud.
• Provide security input into architecture and design decisions.
• Work with technical teams to implement identity, access management, SSO and federated services controls.
• Oversee information security risk management including risk registers.
• Lead ISO 27001, Cyber Essentials Plus, PCI-DSS, NIST/CIS Controls compliance.
• Manage audits and remediation; oversee third-party/security risk.
• Develop security reporting, KPIs and dashboards for senior management.

Job description

Maxwell Bond is seeking a Principal Information Security Officer in Reading for a hybrid, permanent role. You will lead security strategies, oversee ISMS, and act as deputy to the Director of Cyber Security, ensuring governance, risk and compliance across the business.

You will bridge strategic security requirements with practical implementation, guiding technical teams and driving improvements across security controls and cloud/infrastructure environments.