Information Security Officer

Role: Information Security Officer
Salary: 40,000
Location: Central London

Are you passionate about safeguarding critical data in the ever–evolving financial landscape? Our client, a leading financial institution, is seeking a talented Information Security Officer to play a pivotal role in ensuring the security of their sensitive information and systems.

About the Role: As an Information Security Officer, you will be the cornerstone of the company's security initiatives, responsible for developing and implementing security policies, protecting digital assets, and ensuring regulatory compliance within the financial sector. This is a fantastic opportunity for a detail–oriented professional with a strong understanding of financial regulations to contribute to the security posture of a major financial institution.

Key Responsibilities:

1. Develop, implement, and manage comprehensive information security policies and procedures
2. Conduct regular risk assessments and vulnerability analyses to ensure compliance with financial regulations (e.g., GDPR, FCA, PCI–DSS)
3. Oversee security incident response and coordinate investigation efforts
4. Monitor and respond to emerging threats, ensuring real–time protection
5. Collaborate with IT, compliance, and legal teams to align security protocols with regulatory requirements
6. Educate and train staff on information security best practices and policies
7. Maintain and audit security frameworks (ISO 27001, NIST) and ensure continuous improvement

Qualifications:

1. Proven experience in information security within the financial services industry
2. Strong understanding of financial regulations and compliance (e.g., FCA, SOX)
3. Familiarity with security standards and frameworks (ISO 27001, NIST, PCI–DSS)
4. Certifications such as CISSP, CISM, or equivalent are preferred
5. Excellent problem–solving skills and the ability to communicate complex security issues to both technical and non–technical audiences
6. Experience with incident response and threat mitigation