Information Security Officer

Information Security Officer

Location: London - hybrid (3 days a week onsite)

Salary: up to £60k DOE + company benefits

About the Role

Our client is looking for an Information Security Officer to help strengthen and scale their organisation’s security posture. This is the first role within their internal security function, where you’ll coordinate security activities across the business, support compliance initiatives, and act as the key liaison between internal teams, outsourced Security Operations Centre (SOC), and Virtual CISO. You’ll play a vital role in embedding governance, risk, and compliance (GRC) frameworks, helping mature security capabilities while enabling the business to operate securely and efficiently.

Essential Skills & Experience

• 3–5 years in information security, IT security, or compliance
• Strong understanding of GRC principles
• Experience with Microsoft security tools (Sentinel, Defender, Microsoft Security Stack)
• Familiarity with frameworks such as ISO 27001, NIST, CIS, Cyber Essentials
• Experience assessing third-party/vendor risk
• Excellent stakeholder management and communication skills
• Ability to translate security requirements into practical business outcomes

What You'll Be Doing

• Act as the primary contact for the outsourced SOC and coordinate security alerts, incidents, and remediation.
• Support governance, risk, and compliance activities, including ISO 27001, Cyber Essentials Plus, NIST, and CIS.
• Develop and maintain security policies, risk assessments, and compliance documentation.
• Lead third-party risk management, including vendor assessments, supplier risk tracking, and secure onboarding.
• Deliver security awareness initiatives and promote best practices across the business.
• Support audits, client security questionnaires, and strategic security improvement projects alongside the Virtual CISO.
• Report on security posture, risks, and compliance to leadership.