About this role
Salary: £50,000 - 50,000 per year
Requirements: Experience in Information Security Governance, Risk and Compliance (GRC)Experience in Information Security Assurance and risk managementExperience with ISO 27001 and Information Security Management Systems (ISMS)Knowledge of GDPR and data protection requirementsExperience with security audits, compliance reviews and assurance activitiesExperience with supplier or third-party security assessmentsExperience with security incident management and response processesExperience with Microsoft security technologies such as Defender, Sentinel, Entra ID or similar platformsAbility to build strong relationships with stakeholders at all levelsDesirable: Cyber Essentials or Cyber Essentials PlusDesirable: Experience with the NIST Cyber Security FrameworkDesirable: Experience within infrastructure, utilities, energy, defence, engineering, financial services or other regulated sectorsDesirable: Professional certifications such as CISSP, CISM, ISO 27001 Lead Auditor/Implementer, Security or equivalent Responsibilities: Own and maintain the Information Security Management System (ISMS)Ensure compliance with ISO 27001, GDPR and wider security governance requirementsDevelop and maintain security policies, standards and proceduresConduct security risk assessments and support internal and external auditsManage supplier and third-party security assurance activitiesProvide oversight of Microsoft 365 security controls, including identity and access management, MFA, endpoint protection and monitoringWork closely with SOC and security service providers to support incident management and response activitiesProduce security reports, dashboards and assurance documentation for senior stakeholdersDeliver security awareness initiatives across the organisationSupport continuous improvement of security controls, processes and governance frameworks Technologies: Incident ManagementSupportMicrosoft 365SecurityOffice 365 More:
We are recruiting for an Information Security & Assurance Officer to join a major UK infrastructure programme based in Suffolk onsite. This is a fantastic opportunity for an information security professional who enjoys balancing security governance, compliance and assurance with oversight of operational cyber security activities. You will play a key role in maintaining our Information Security Management System, ensuring compliance with recognised security frameworks, managing risk and assurance activities, and acting as a trusted adviser to both technical and non-technical stakeholders. We offer a 15% project uplift paid monthly, a company car or car allowance, annual bonus, private medical insurance, life assurance, enhanced pension contributions, 25 days annual leave plus bank holidays, an additional holiday purchase scheme, paid professional memberships, and ongoing training and development opportunities. This is an excellent opportunity to join a high-profile programme where you will have real ownership of information security governance and assurance while contributing to the success of a nationally significant project.
last updated 34 week of 2026