Lead / Senior Information Security Analyst

About The Role
We’re looking for a proactive and capable Lead Information Security Analyst, or a Senior Analyst who’s ready to take the next step in their career into team leadership and management.
This is an ideal opportunity for someone with strong hands-on experience of information security frameworks and audit processes, looking to grow and develop further in their career.
Working closely with the Head of Operational Governance, you’ll support and coordinate key compliance activities across ISO 27001, PCI DSS, and Cyber Essentials Plus. You’ll also take the lead in drafting policies, engaging with suppliers, and contributing to commercial tenders from a data protection and risk perspective.
This role includes the opportunity to lead, mentor and support the members of the Information Security team.
Key Responsibilities

Lead on the operation and continual improvement of the Information Security Management System (ISMS)
Coordinate internal and external audit readiness for ISO 27001, PCI DSS, and Cyber Essentials Plus
Draft and update information security policies, procedures, and technical standards
Work with procurement and commercial teams to support supplier assurance and risk assessment
Contribute to tender responses and bid processes, ensuring security and compliance requirements are met
Promote good security practices and raise awareness across departments
Act as an escalation point and day-to-day contact for other team members.
Stay up to date with changes in legislation and standards relating to information and cyber security

About The Candidate
The ideal candidate will have the following:
Essential:

Relevant knowledge and background in either IT, Cyber Security, Information Systems, or a related discipline.
Strong working knowledge of ISO 27001, PCI DSS, and Cyber Essentials Plus.
Evidenced ability to support and prepare for audits, including evidence collation and audit readiness.
Outstanding attention to detail with the ability to write and maintain high-quality documentation.
Excellent stakeholder communication skills, both written and verbal, with the ability to build effective working relationships and influence at all levels.
Comfortable working independently and proactively across teams.Desirable:

Exposure to supplier risk management and/or tender processes
ISO 27001 Lead Auditor/Implementer, PCIP, CISM, CompTIA Security+, CISMP
Why Join Us?
You will play a key role in protecting our organisation’s data and systems, ensuring we meet the highest information security standards and compliance requirements, and you’ll join a professional and dedicated team that values curiosity, collaboration, integrity and agility.
Here at allpay, we follow an Office First working model, reflecting the importance we place on in-person collaboration across our teams, most of whom are based on-site. While we are open to discussing flexible working arrangements, a strong on-site presence will be essential to support the existing teams and projects.

About The Company
People are at the heart of allpay and we reward our employee with a competitive benefits package which includes, a defined contribution group pension scheme, income protection, life assurance, an array of health and wellbeing options including private healthcare cover and an onsite gym. This is coupled with our excellent Learning and Development offering.
We work with some great recruitment agencies. We don’t choose to partner with everyone. Explicit consent or confirmation must be received from our HR department before we accept CV’s. Contractual terms and specific campaigns must have been signed and agreed before you are considered a partner. We never accept unsolicited CV’s, EVER! Even from our trusted partners. We consider it “spoiling,” which does not endear you to us. By sending us unsolicited CV’s we deem these a free gift. If we choose to engage these candidates directly we will not pay you any fees. You will be deemed to have accepted this zero fee by providing unsolicited or spoiled candidates.

We are a company committed to Equal Opportunities.

All roles at allpay Limited are subject to successful background checks including a DBS and Credit Check