Senior Information Security Officer

Hackajob Ltd; Bournemouth; Hybrid; GBP 81,000 - 99,000; Full time

Benefits offered by this job

Bonus schemes

Pension up to 12% (matched 6%)

Health insurance

Life assurance

Job summary

Hackajob Ltd in Bournemouth is recruiting a Senior Information Security Officer to lead our ISO27001 program and strengthen the information security governance across the business. You will drive risk assessment, partner with Cyber Security Operations, and translate complex security concepts into clear guidance for stakeholders.

The role is hybrid with 2 days onsite in Bournemouth, offering a competitive package, life assurance, pension, and comprehensive benefits as part of the Vitality

Qualifications

• Minimum 5 years in information security.
• Experience assessing supplier and third-party risk.
• Strong ability to translate technical concepts into business terms.
• Experience with ISO27001 and governance frameworks.

Responsibilities

• Improve ISO27001 ISMS and maintain compliance.
• Deliver security initiatives to realise strategy.
• Own information risk management aligned with Enterprise Risk Framework.
• Advise on regulatory requirements (ISO27001, GDPR, NIST, ITIL).
• Lead security governance forums and Information Risk team.
• Embed security across projects and DPIAs.
• Oversee supplier and third-party security risk.
• Drive security culture with policies and training.

Skills

InfoSec experience

Third-party risk

ISO27001 knowledge

Regulatory compliance

Communication

Tools

ITIL

NIST

PCI DSS

GDPR

Job description

Salary: £90,000 - 90,000 per year

Requirements:

• Minimum 5 years experience working in an information security environment
• Proven experience in assessing and managing supplier and third-party security risk
• Strong communication skills, with the ability to translate technical concepts into clear, business-friendly messaging and produce high-quality documentation, including policies, standards and project artefacts
• Demonstrated experience working across projects and development lifecycles, including Agile environments
• Hands-on experience implementing and maintaining ISO27001 and broader security governance frameworks, such as ISO27001/2, NIST and PCI DSS
• Solid understanding of data protection and regulatory requirements, such as FCA, ICO, PRA and GDPR, and how to apply them in practice
• Ability to balance risk, compliance and business objectives in a fast-paced, evolving environment

Responsibilities:

• Drive the continuous improvement of our ISO27001 framework and Information Security Management System (ISMS), ensuring ongoing compliance
• Deliver key security initiatives that bring our Information Security Strategy to life and drive measurable impact
• Own and mature information risk management in alignment with our Enterprise Risk Framework
• Act as a trusted advisor on regulatory requirements and best-practice frameworks, including ISO27001, GDPR, NIST and ITIL, protecting the confidentiality, integrity and availability of systems
• Lead security governance forums and manage our Information Security Governance team, including the Information Risk function
• Embed security across projects and development lifecycles, ensuring risks are identified, assessed, including DPIAs, and effectively mitigated
• Oversee supplier and third-party security risk, working closely with Cyber Security Operations to protect our wider ecosystem
• Drive a strong security culture by maintaining policies, delivering compliance reviews and rolling out engaging awareness and training programmes

Technologies:

• ITIL
• Security
• Support

More:

We are partnering directly with Vitality to hire for this Senior Information Security Officer role within our Information Security team. This is a hybrid position based in our Bournemouth office, requiring 2 days per week onsite, with full-time hours of 35 per week. We are happy to discuss flexible working. We offer bonus schemes, a pension of up to 12% with matched contributions up to 6%, award-winning health insurance with rewards and benefits, and life assurance at four times annual salary. We are committed to supporting your health, wellbeing, growth and flexibility, and creating an environment where you can thrive, belong and contribute to our business and society.