Senior InfoSec & Data Privacy Officer — UK (Remote)

Unmind; Greater London; À distance; GBP 120 000 - 150 000; Plein temps

Avantages offerts par ce poste

Private medical

Equity in Unmind

Parental leave

Holiday & birthdays

Wellbeing days

Remote-friendly UK

Learning budget

Therapy sessions

Résumé du poste

Unmind is seeking a Principal Information Security & Data Protection Officer to lead information security and privacy programs. You will act as the DPO, oversee ISO 27001 and Cyber Essentials, and advise on privacy for new products, suppliers and AI use cases.

You will collaborate with Engineering, Product and Legal to set security standards, manage DPIAs, data subject rights and data breach assessments, and report risk to ELT and the Board.

Qualifications

• Experience implementing ISO 27001 in a global technology business.
• Practical knowledge of UK/EU GDPR, DPIAs, rights requests and transfers.
• Experience acting as, or with, a DPO function.
• Able to explain security/privacy to clients and senior leaders clearly.
• Advise engineering/product on mitigations for security risks.
• Understanding of AI-related security/privacy risks.
• Independent advisory to senior leadership with integrity.
• Excellent written and verbal communication; attention to detail.

Responsabilités

• Information Security: oversee security program, ISO 27001, risk management, policies, audits.
• Lead ISMS governance, board chairing, and incident management.
• Collaborate with Engineering/Product/Legal on threats and mitigations.
• DPO: perform statutory GDPR duties, DPIAs, data rights, and breach assessments.
• Privacy reviews of DPAs and client assurance; report risk to ELT/Board.

Connaissances

ISO27001

GDPR

DPO

InfoSec governance

Risk assessment

AI security

Stakeholder comms

Integrity

Formation

CISSP/CISM/CIPP/E or CIPM cert

Description du poste

Unmind is seeking a Principal Information Security & Data Protection Officer to lead information security and privacy programs. You will act as the DPO, oversee ISO 27001 and Cyber Essentials, and advise on privacy for new products, suppliers and AI use cases.

You will collaborate with Engineering, Product and Legal to set security standards, manage DPIAs, data subject rights and data breach assessments, and report risk to ELT and the Board.