Senior Information Security Officer

Vitality; Bournemouth; Hybrid; GBP 70,000 - 110,000; Full time

Benefits offered by this job

Bonus schemes

Pension up to 12%

Vitality health insurance

Life Assurance

Job summary

Vitality is seeking a Senior Information Security Officer to lead governance and risk across the UK Group, strengthening ISO 27001 and driving improvements that shape the Information Security Strategy. You will advise on regulatory requirements and supplier security, influencing key business decisions.

You will partner with senior stakeholders, manage security across the SDLC/DPIA processes, and mentor the Information Security Analyst to strengthen security awareness and accountability.

Qualifications

• Extensive experience in information security governance, risk management and regulatory compliance.
• Proven security qualifications or certifications such as CISSP, CISM, CISA, MSc or equivalent.
• Experience with ISO 27001, NIST, PCI DSS and GDPR compliance.

Responsibilities

• Lead the continuous improvement and maintenance of the Information Security Management System and ISO 27001 compliance across the Vitality UK Group.
• Manage information security risks per the Enterprise Risk Framework with clear ownership and reporting.
• Deliver strategic information security initiatives aligned with the Information Security Strategy.
• Provide guidance on regulatory requirements, data protection and security frameworks including ISO 27001, NIST, PCI DSS and GDPR.
• Oversee security governance across projects, procurement and development ensuring risks are addressed in SDLC and DPIA processes.
• Maintain information security policies, standards, procedures and guidance.
• Develop and deliver planned compliance reviews and remediation activities.
• Chair security committees and report governance and risk to senior stakeholders; represent Vitality externally.
• Lead and support the Information Security Analyst and strengthen security awareness across the business.

Skills

Governance

Information risk

Stakeholder comms

Education

CISSP

CISM

CISA

MSc

Job description

About The Role

Team – Information Security

Working Pattern -

Hybrid – 2 days per week in the Vitality Bournemouth, London or Stockport Office. Full-time hours apply.

We are happy to discuss flexible working!

Top 3 skills needed for this role:

• Proven security governance expertise
• Strong information risk judgement
• Credible stakeholder communication

What this role is all about

Play a key role in shaping the future of Information Security at Vitality. As our Senior Information Security Officer, you’ll lead on security governance and risk, strengthen our ISO 27001 framework and bring clear, practical security thinking to key business decisions. From strategic projects and suppliers to regulatory requirements, you’ll influence across the business, drive continuous improvement and support the development of our wider Information Security Strategy.

What you will be doing

• Lead the continuous improvement and maintenance of the Information Security Management System and ISO 27001 compliance across the Vitality UK Group
• Manage information security risks in line with the Enterprise Risk Framework, ensuring appropriate controls, ownership and reporting are in place
• Deliver strategic information security initiatives and projects aligned with the wider Information Security Strategy
• Provide authoritative guidance on regulatory requirements, data protection and security frameworks including ISO 27001, NIST, PCI DSS and GDPR
• Oversee security governance across projects, procurement and development activity, ensuring risks are addressed throughout the SDLC and DPIA process
• Maintain information security policies, standards, procedures and guidance, ensuring they remain effective and aligned with emerging requirements
• Develop and deliver planned compliance reviews, track identified gaps and ensure agreed remediation activity is completed
• Chair security committees, produce governance and risk reporting for senior stakeholders and represent Vitality at relevant external forums
• Lead and support the Information Security Analyst while building strong relationships across the business to strengthen security awareness and accountability

What do you need to thrive?

• Extensive experience working in information security, with strong knowledge of governance, risk management and regulatory compliance
• Professional security qualifications or certifications such as CISSP, CISM, CISA, an MSc or an equivalent recognised qualification
• Proven experience managing ISO 27001 and other security governance frameworks such as NIST or PCI DSS
• Strong understanding of data protection and regulatory requirements including GDPR, FCA, ICO and PRA expectations
• Experience assessing and managing supplier security risks
• Experience supporting projects throughout the SDLC, including working within Agile delivery environments
• The ability to translate complex technical and regulatory requirements for non-technical stakeholders and senior decision-makers
• Strong policy, standards, governance reporting and project documentation experience

So, what’s in it for you?

• Bonus Schemes – A bonus that regularly rewards you for your performance
• A pension of up to 12%– We will match your contributions up to 6% of your salary
• Our award-winning Vitality health insurance – With its own set of rewards and benefits
• Life Assurance – Four times annual salary

These are just some of the many perks that we offer! To view the extensive range of benefits we offer, please visit our careers page.Fantastic Benefits. Exciting rewards. Great career opportunities!

If you are successfulin your application and join us at Vitality, this is our promise to you, we will:

• Help you to be the healthiest you’ve ever been
• Create an environment that embraces you as you are and enables you to be your best self
• Give you flexibility on how, where and when you work
• Help you advance your career by playing you to your strengths
• Give you a voice to help our business grow and make Vitality a great place to be
• Give you the space to try, fail and learn
• Provide a healthy balance of challenge and support
• Recognise and reward you with a competitive salary and amazing benefits
• Be there for you when you need us
• Provide opportunities for you to be a force for good in society

We commit to all these things because we want you to feel that you belong, and are supported to be happy and healthy.

About Us

We’re incredibly proud to be recognised for the culture we've created — recently being named one of Glassdoor’s Best Places to Work 2026, and in 2024 we were delighted to be awarded Top 10 Places to Work in the Sunday Times Awards.

Vitality is a multi-award-winning UK insurance brand, here to make the world a healthier, happier place.
We’ve been a purpose and values-driven business from day 1- long before it became fashionable. Our core purpose is to make people healthier and enhance protect their lives. Vitality pioneered shared-value insurance. We incentivise people to live healthier longer lives – they benefit, our business benefits, and society benefits. We’re successful because we attract, develop, and retain the best people – and because we care.
Plus, you get to join our 1.7+ million members with access to our unique health insurance and healthy living programme. Just to make sure you know our products inside and out.
Ready to find out if we’re the right fit for you? We can’t wait.

Diversity & Inclusion

At Vitality, we’re committed to diversity and inclusion because it’s good for our employees, for our business, and for society. We welcome applications from individuals of all backgrounds, experiences, and perspectives.

Vitality’s approach to sustainability

Vitality is a business that drives positive change. We reward people for making and sustaining healthier choices. But healthy people also need a healthy environment. To learn more please visit our Careers page. #LI-Hybrid