Information Security Officer

Milton Keynes
3 months ago
Applications closed

Related Jobs

View all jobs

Information Security Officer (Physical Security)

Senior Information Security Engineer

IT Security Officer (Governance & Compliance)

IT Security Officer (Governance & Compliance)

Data Protection & Information Security Officer

Head of Security

Permanent
Based in Milton Keynes
£50,000 pa - £60,000 pa
Information Security Officer 
Hybrid
 
Our client are a leading provider of software solutions for student accommodation, event management, catering, and residential services, they help institutions streamline operations, elevate customer experiences, and unlock their full potential.

With over 25 years of experience and trusted by more than 350 institutions worldwide, their software empowers universities and venues to run smarter, faster, and more collaboratively. From bustling campuses to dynamic corporate environments, their technology adapts to the rhythm of each organisation — helping them thrive in a fast-changing world.

They are more than just software. They are a team of passionate problem-solvers, innovators, and collaborators who care deeply about their customers and each other. Their culture is built on empowerment, community, and continuous growth. They believe in giving people the tools, support, and freedom to do their best work — and have fun while doing it.

Joining our client means being part of a purpose-driven business where your ideas matter, your development is supported, and your impact is real. If you're ready to help shape the future of operational technology in education and events, we'd love to meet you.
 
An experienced Information Security Officer to lead security strategy, operations, and compliance. This is a hands-on role combining strategic security architecture with operational security management and regulatory compliance oversight. The successful candidate will define security standards across our product portfolio, manage security environments, and serve as our central point for ISO27001, PCI/DSS, and GDPR compliance while supporting commercial teams with tender responses and client security assurance. 

Core Responsibilities:

Strategic (30%) 

Define technical security architecture and standards across multi-cloud SaaS platforms 
Embed security into product development lifecycle and roadmap planning 
Conduct threat modelling and risk assessments for new features and system changes 
Evaluate and recommend security technologies and tools  Operational (40%) 

Manage security environments across Azure and AWS infrastructure 
Coordinate security incident response and vulnerability remediation 
Oversee security monitoring, alerting, and detection capabilities 
Manage vulnerability assessment and penetration testing programs 
Maintain identity and access management controls  Compliance & Assurance (30%) 

Maintain ISO27001 certification and manage audit cycles 
Ensure PCI/DSS compliance for payment processing systems 
Manage GDPR compliance across all products and operations 
Complete HECVAT and security questionnaires for higher education tenders 
Support sales and customer success with security documentation and evidence 
Act as primary security contact for customers and prospects  Essential Requirements:

Substantial information security experience in SaaS/cloud software environment (ISV or B2B software preferred) 
Proven track record managing ISO27001 certification and compliance 
Practical GDPR implementation experience in software products 
PCI/DSS compliance experience with payment processing systems 
Strong understanding of cloud security (Azure and/or AWS) 
Application security and secure development lifecycle knowledge 
Security incident management and cross-functional response coordination 
Excellent communication skills - able to translate technical security for commercial and executive audiences 
Experience supporting tender responses and client security assurance  Preferred:

Professional certifications: CISSP, CISM, CISA, or equivalent 
Higher education sector experience 
Multi-tenant SaaS architecture security experience 
DevSecOps and CI/CD security integration knowledge 
Security frameworks: NIST, CIS Controls, OWASP 
Multi-jurisdictional data protection knowledge 
Enterprise sales cycle support experience  Key Attributes:

Strategic thinker who can balance security with business needs 
Pragmatic approach to security implementation 
Detail-oriented with strong organisational skills 
Collaborative and able to influence across teams 
Proactive in identifying risks and improvement opportunities 
Comfortable in fast-paced, dynamic environment  Our client have created a welcoming office environment, with well-stocked kitchens offering free breakfast, fresh fruit, hot and cold drinks, and a range of tuck shop goodies to keep you fuelled throughout the day. They are an equal opportunity employer, fostering diversity and committed to creating an inclusive environment for all employees.
 
Please let us know if we need to make reasonable adjustments to our process, please let us know about how we can best support you and make the adjustments that may be needed.
 
Altitude-Recruitment Limited acting as an Employment Agency and Employment Business

Subscribe to Future Tech Insights for the latest jobs & insights, direct to your inbox.

By subscribing, you agree to our privacy policy and terms of service.

Industry Insights

Discover insightful articles, industry insights, expert tips, and curated resources.

Careers

How Many Cyber Security Tools Do You Need to Know to Get a Cyber Security Job?

If you are trying to build or move forward in a cyber security career, it can feel like the list of tools you are expected to know never ends. One job advert asks for SIEM platforms, another mentions penetration testing tools, another lists cloud security, threat intelligence platforms, endpoint detection, scripting languages and compliance frameworks. Scroll LinkedIn and it gets worse. Everyone seems to “know” dozens of tools, certifications and platforms. Here is the reality most cyber security hiring managers agree on: they are not hiring you because you know every tool. They are hiring you because you understand risk, can think like an attacker and a defender, follow process, communicate clearly and make good decisions under pressure. Tools matter — but only when they support those outcomes. So how many cyber security tools do you actually need to know to get a job? For most job seekers, the answer is far fewer than you think. This article explains what employers really expect, which tools are essential, which are role-specific and how to focus your learning so you look credible, not overwhelmed.

Jobs

What Hiring Managers Look for First in Cyber Security Job Applications (UK Guide)

If you want to stand out in the highly competitive world of cyber security job applications, you need to understand what hiring managers look for before they even finish reading a CV. Cyber security hiring managers scan applications quickly and with specific priorities in mind. They assess not just your technical ability, but your judgement, professionalism, clarity, risk awareness and evidence of impact. This guide explains what hiring managers look for first in cyber security applications across roles like Security Analyst, Security Engineer, Penetration Tester, Incident Responder, Security Architect, Governance Risk and Compliance specialists and Cloud Security positions. Use this as a practical, step-by-step checklist to sharpen your CV, LinkedIn profile, cover letter and portfolio before you apply on www.cybersecurityjobs.tech .

Education

The Skills Gap in Cyber Security Jobs: What Universities Aren’t Teaching

Cyber security has become one of the most critical disciplines in the modern economy. From protecting financial systems and healthcare data to securing national infrastructure, cloud platforms and supply chains, cyber security professionals now sit at the frontline of digital trust. Demand for cyber security talent in the UK has surged. Job vacancies remain high, salaries continue to rise, and organisations across every sector report difficulty hiring skilled professionals. Yet despite this demand, many graduates struggle to break into cyber security roles and employers consistently report that candidates are not job-ready. The problem is not intelligence, ambition or academic effort. It is a persistent and widening skills gap between university education and real-world cyber security work. This article explores that gap in depth: what universities teach well, what they routinely miss, why the gap exists, what employers actually want, and how jobseekers can bridge the divide to build sustainable careers in cyber security.

🍪 We use cookies to enhance your browsing experience on our website. By continuing to use this site, you consent to the use of cookies as described in our Cookie Policy. You can review our Cookie Policy for more information.