Senior Information Security Officer

Vitality; Greater London, Stockport; Hybrid; GBP 90,000 - 120,000; Full time

Benefits offered by this job

Bonus schemes

Pension up to 12% with employer match

Vitality health insurance

Life assurance 4x salary

Job summary

Vitality is seeking a Senior Information Security Officer to lead governance and risk, strengthen ISO 27001, and guide key business decisions with clear security thinking. You will shape the Information Security Strategy across the UK Group, influence suppliers and regulatory requirements, and drive improvements with senior stakeholders.

This role supports flexible, hybrid working patterns. Join Vitality to champion information security across projects, procurement, and development while

Qualifications

• Extensive information security experience with governance, risk and compliance.
• Professional certifications such as CISSP, CISM or CISA, or an MSc.
• Experience implementing ISO 27001 and other frameworks such as NIST or PCI DSS.
• Strong knowledge of data protection laws including GDPR, FCA, ICO and PRA expectations.
• Experience assessing supplier security risks and SDLC involvement.
• Ability to translate complex regulatory requirements for non-technical stakeholders.

Responsibilities

• Lead the continuous improvement and maintenance of the Information Security Management System and ISO 27001 across the Vitality UK Group.
• Manage information security risks in line with the Enterprise Risk Framework with appropriate controls and reporting.
• Deliver strategic information security initiatives aligned with the Information Security Strategy.
• Provide guidance on regulatory requirements, data protection and security frameworks (ISO 27001, NIST, PCI DSS, GDPR).
• Oversee security governance across projects, procurement and development activities throughout SDLC and DPIA processes.
• Maintain information security policies, standards, procedures and guidance.
• Develop and deliver compliance reviews, track gaps and remediation actions.
• Chair security committees and report governance/risk to senior stakeholders; represent Vitality externally.
• Lead and support the Information Security Analyst while building security awareness across the business.

Skills

Governance expertise

Information risk judgement

Stakeholder communication

Education

Security qualifications (CISSP/CISM/CISA/MSc)

Job description

Team - Information Security

Working Pattern - Hybrid - 2 days per week in the Vitality Bournemouth, London or Stockport Office. Full-time hours apply.

We are happy to discuss flexible working!

Top 3 skills needed for this role:

• Proven security governance expertise
• Strong information risk judgement
• Credible stakeholder communication

What This Role Is All About

Play a key role in shaping the future of Information Security at Vitality. As our Senior Information Security Officer, you’ll lead on security governance and risk, strengthen our ISO 27001 framework and bring clear, practical security thinking to key business decisions. From strategic projects and suppliers to regulatory requirements, you’ll influence across the business, drive continuous improvement and support the development of our wider Information Security Strategy.

What You Will Be Doing

• Lead the continuous improvement and maintenance of the Information Security Management System and ISO 27001 compliance across the Vitality UK Group
• Manage information security risks in line with the Enterprise Risk Framework, ensuring appropriate controls, ownership and reporting are in place
• Deliver strategic information security initiatives and projects aligned with the wider Information Security Strategy
• Provide authoritative guidance on regulatory requirements, data protection and security frameworks including ISO 27001, NIST, PCI DSS and GDPR
• Oversee security governance across projects, procurement and development activity, ensuring risks are addressed throughout the SDLC and DPIA process
• Maintain information security policies, standards, procedures and guidance, ensuring they remain effective and aligned with emerging requirements
• Develop and deliver planned compliance reviews, track identified gaps and ensure agreed remediation activity is completed
• Chair security committees, produce governance and risk reporting for senior stakeholders and represent Vitality at relevant external forums
• Lead and support the Information Security Analyst while building strong relationships across the business to strengthen security awareness and accountability

What do you need to thrive?

• Extensive experience working in information security, with strong knowledge of governance, risk management and regulatory compliance
• Professional security qualifications or certifications such as CISSP, CISM, CISA, an MSc or an equivalent recognised qualification
• Proven experience managing ISO 27001 and other security governance frameworks such as NIST or PCI DSS
• Strong understanding of data protection and regulatory requirements including GDPR, FCA, ICO and PRA expectations
• Experience assessing and managing supplier security risks
• Experience supporting projects throughout the SDLC, including working within Agile delivery environments
• The ability to translate complex technical and regulatory requirements for non-technical stakeholders and senior decision-makers
• Strong policy, standards, governance reporting and project documentation experience

So, what’s in it for you?

• Bonus Schemes - A bonus that regularly rewards you for your performance
• A pension of up to 12%- We will match your contributions up to 6% of your salary
• Our award-winning Vitality health insurance - With its own set of rewards and benefits
• Life Assurance - Four times annual salary

These are just some of the many perks that we offer! To view the extensive range of benefits we offer, please visit our careers page. Fantastic Benefits. Exciting rewards. Great career opportunities!

We will:

• Help you to be the healthiest you’ve ever been
• Create an environment that embraces you as you are and enables you to be your best self
• Give you flexibility on how, where and when you work
• Help you advance your career by playing you to your strengths
• Give you a voice to help our business grow and make Vitality a great place to be
• Give you the space to try, fail and learn
• Provide a healthy balance of challenge and support
• Recognise and reward you with a competitive salary and amazing benefits
• Be there for you when you need us
• Provide opportunities for you to be a force for good in society

We commit to all these things because we want you to feel that you belong, and are supported to be happy and healthy.