Senior Information Security & Risk Leader - Hybrid

Vitality; Bournemouth; Hybrid; GBP 70,000 - 110,000; Full time

Benefits offered by this job

Bonus schemes

Pension up to 12%

Vitality health insurance

Life Assurance

Job summary

Vitality is seeking a Senior Information Security Officer to lead governance and risk across the UK Group, strengthening ISO 27001 and driving improvements that shape the Information Security Strategy. You will advise on regulatory requirements and supplier security, influencing key business decisions.

You will partner with senior stakeholders, manage security across the SDLC/DPIA processes, and mentor the Information Security Analyst to strengthen security awareness and accountability.

Qualifications

• Extensive experience in information security governance, risk management and regulatory compliance.
• Proven security qualifications or certifications such as CISSP, CISM, CISA, MSc or equivalent.
• Experience with ISO 27001, NIST, PCI DSS and GDPR compliance.

Responsibilities

• Lead the continuous improvement and maintenance of the Information Security Management System and ISO 27001 compliance across the Vitality UK Group.
• Manage information security risks per the Enterprise Risk Framework with clear ownership and reporting.
• Deliver strategic information security initiatives aligned with the Information Security Strategy.
• Provide guidance on regulatory requirements, data protection and security frameworks including ISO 27001, NIST, PCI DSS and GDPR.
• Oversee security governance across projects, procurement and development ensuring risks are addressed in SDLC and DPIA processes.
• Maintain information security policies, standards, procedures and guidance.
• Develop and deliver planned compliance reviews and remediation activities.
• Chair security committees and report governance and risk to senior stakeholders; represent Vitality externally.
• Lead and support the Information Security Analyst and strengthen security awareness across the business.

Skills

Governance

Information risk

Stakeholder comms

Education

CISSP

CISM

CISA

MSc

Job description

Vitality is seeking a Senior Information Security Officer to lead governance and risk across the UK Group, strengthening ISO 27001 and driving improvements that shape the Information Security Strategy. You will advise on regulatory requirements and supplier security, influencing key business decisions.

You will partner with senior stakeholders, manage security across the SDLC/DPIA processes, and mentor the Information Security Analyst to strengthen security awareness and accountability.