Senior Information Security Officer

Maru; Stockport, Greater London; Hybrid; GBP 77,000 - 94,000; Full time

Benefits offered by this job

16% bonus

Job summary

Maru is seeking a Senior Information Security Officer in the UK to own the ISMS across the group, drive practical ISO 27001 implementation and scale the security team.

You will lead risk management, embed security in projects from day one, manage supplier risk and build a robust security framework with senior backing while growing the team to meet demand.

Qualifications

• 7+ years in information security.
• Experience leading security programs and teams.
• Hands-on experience with ISO 27001 and related frameworks (NIST, PCI DSS).

Responsibilities

• Own the ISMS and ISO 27001 compliance across the UK group.
• Manage information security risk per the enterprise risk framework.
• Integrate security into projects from the SDLC and DPIAs.
• Oversee supplier security risk alongside the Cyber Security Operations Lead.
• Own security policies and standards and ensure compliance.
• Run security awareness and training programs.
• Chair security committees and report to senior risk owners.
• Lead a growing information security team from Analyst to consultants.

Skills

Information security leadership

Risk management

Stakeholder communication

Regulatory compliance

Education

MSc in Information Security or related

Job description

Senior Information Security Officer
Up to £85,000 + 16% bonus | Bournemouth (preferred), Stockport or London | Permanent

Want a senior security role where you actually get to do security, not just write about it?

This is a hands-on role with a well-known UK health and life insurer that is investing in its information security function. You will own information security across the UK business, make ISO 27001 work in the real world, and build a team around you as it grows.

What you will be doing

• Owning the ISMS and ISO 27001 compliance, and extending it across the wider UK group
• Managing information security risk in line with the enterprise risk framework
• Getting security into projects from day one, across the SDLC, including DPIAs
• Assessing and managing supplier security risk alongside the Cyber Security Operations Lead
• Owning the security policies and standards, and making sure people actually follow them
• Running the security awareness and training programme
• Chairing security committees and reporting to senior risk owners
• Leading the team: an Information Security Analyst to start, growing to 3 plus a consultant

What you will bring

• 7+ years in information security
• CISSP, CISM, CISA, an MSc or equivalent
• Hands-on ISO 27001 experience, plus frameworks such as NIST and PCI DSS
• Information security risk management and supplier assurance
• Working knowledge of FCA, PRA, ICO and GDPR requirements
• The ability to explain technical risk to non-technical people and bring them with you
• Insurance, healthcare or financial services experience and internal audit skills are a real plus

Why this one

• Operational and live. Your time goes on solving problems and building relationships, not living in documentation
• A genuine leadership step, with the team growing around you
• A clear security strategy and senior backing to deliver it
• A quick process: interviews in November, offers before Christmas