Information Security Officer

Information Security Officer - GRC focused

Permanent - £50k to £55k

Location: Hybrid - CardiffYour new company

You will play a key role at a local private sector organisation, who are looking to recruit an Information Security Officer on a permanent basis. This role is crucial for ensuring IT operations align with regulatory standards and organisational goals. Key areas will include strategic planning, incident response and integrating compliance frameworks (e.g. GDPR, ISO 27001) to protect critical systems.

Your new role

You will act as the Information Security SME on all things GRC and InfoSec. This role is crucial to the company's plans to improve and mature the InfoSec practices within the organisation, and they are looking for someone to come in with ideas and expertise on how to improve and protect their IT and InfoSec estate. You will be responsible for developing risk management processes, crisis plans and vendor oversight, whilst collaborating with stakeholders to implement security measures and enhance compliance. You will have a good level of autonomy and will be the owner of the GRC elements for the organisation.

• Risk & Compliance: Develop IT risk frameworks, perform assessments, and ensure regulatory compliance.
• Incident Response: Maintain an Incident Response Plan and coordinate rapid incident resolution (e.g., cybersecurity breaches, da...