Information Security Officer

Information Security Officer – Permanent, Hybrid, Milton Keynes

Salary £50k-£60k plus benefits

We are looking for an experienced Information Security Officer to lead security strategy, operations, and compliance. This is a hands-on role combining strategic security architecture with operational security management and regulatory compliance oversight. The successful candidate will define security standards across the business product portfolio, manage security environments, and serve as central point for ISO27001, PCI/DSS, and GDPR compliance while supporting commercial teams with tender responses and client security assurance.

Key responsibilities:

• Define technical security architecture and standards across multi-cloud SaaS platforms
  
  
• Embed security into product development lifecycle and roadmap planning
  
  
• Conduct threat modelling and risk assessments for new features and system changes
  
  
• Manage security environments across Azure and AWS infrastructure
  
  
• Oversee security monitoring, alerting, and detection capabilities
  
  
• Manage vulnerability assessment and penetration testing programs
  
  
• Maintain ISO27001 certification and manage audit cycles
  
  
• Ensure PCI/DSS compliance for payment processing systems
  
  
• Act as primary security contact for customers and prospects
  
  Essential Requirements
  
  
• Substantial information security experience in SaaS/cloud software environment (ISV or B2B software preferred)
  
  
• Proven track record managing ISO27001 certification and compliance
  
  
• Practical GDPR implementation experience in software products
  
  
• PCI/DSS compliance experience with payment processing systems
  
  
• Strong understanding of cloud security (Azure and/or AWS)
  
  
• Excellent communication skills - able to translate technical security for commercial and executive audiences
  
  
• Experience supporting tender responses and client security assurance
  
  Preferred/Nice-to-Have
  
  
• Professional certifications: CISSP, CISM, CISA, or equivalent
  
  
• Multi-tenant SaaS architecture security experience
  
  
• DevSecOps and CI/CD security integration knowledge
  
  
• Security frameworks: NIST, CIS Controls, OWASP
  
  
• Multi-jurisdictional data protection knowledge
  
  Key Attributes
  
  
• Strategic thinker who can balance security with business needs
  
  
• Detail-oriented with strong organizational skills
  
  
• Proactive in identifying risks and improvement opportunities
  
  
• Comfortable in fast-paced, dynamic environment
  
  Excellent benefits:
  
  25 days holiday (plus bank holidays) - with extra days the longer you’re with us
  
  Two paid wellbeing days each year, with a budget to enjoy some time out with someone important to you
  
  Enhanced pension contributions to support your future
  
  Two paid days a year to give back through volunteering, charity work, or sustainability projects with our Green Team
  
  Salary sacrifice schemes for electric vehicles and cycle-to-work
  
  24/7 access to our Employee Assistance Programme for confidential advice and support
  
  A full annual health check to keep you at your best
  
  A flexible benefits platform - from life assurance and learning opportunities to retail discounts and cinema tickets
  
  A genuine people-first culture where your growth and wellbeing come first
  
  Performance-related bonus scheme to reward your contribution
  
  Regular socials - from team get-togethers to all-company celebrations, with each department owning a budget for their events
  
  The opportunity to attend group conferences, away days and learning forums both in the UK and abroad - network with other talent
  
  There is a welcoming office environment, with well-stocked kitchens offering free breakfast, fresh fruit, hot and cold drinks, and a range of tuck shop goodies to keep you fuelled throughout the day.
  
  Our client is an equal opportunity employer, fostering diversity and committed to creating an inclusive environment for all employees