About this role
Salary: £90,000 - 90,000 per year
Requirements: Minimum 5 years experience working in an information security environmentProven experience in assessing and managing supplier and third-party security riskStrong communication skills, with the ability to translate technical concepts into clear, business-friendly messaging and produce high-quality documentation, including policies, standards and project artefactsDemonstrated experience working across projects and development lifecycles, including Agile environmentsHands-on experience implementing and maintaining ISO27001 and broader security governance frameworks, such as ISO27001/2, NIST and PCI DSSSolid understanding of data protection and regulatory requirements, such as FCA, ICO, PRA and GDPR, and how to apply them in practiceAbility to balance risk, compliance and business objectives in a fast-paced, evolving environment Responsibilities: Drive the continuous improvement of our ISO27001 framework and Information Security Management System (ISMS), ensuring ongoing complianceDeliver key security initiatives that bring our Information Security Strategy to life and drive measurable impactOwn and mature information risk management in alignment with our Enterprise Risk FrameworkAct as a trusted advisor on regulatory requirements and best-practice frameworks, including ISO27001, GDPR, NIST and ITIL, protecting the confidentiality, integrity and availability of systemsLead security governance forums and manage our Information Security Governance team, including the Information Risk functionEmbed security across projects and development lifecycles, ensuring risks are identified, assessed, including DPIAs, and effectively mitigatedOversee supplier and third-party security risk, working closely with Cyber Security Operations to protect our wider ecosystemDrive a strong security culture by maintaining policies, delivering compliance reviews and rolling out engaging awareness and training programmes Technologies: ITILSecuritySupport More:
We are partnering directly with Vitality to hire for this Senior Information Security Officer role within our Information Security team. This is a hybrid position based in our Bournemouth office, requiring 2 days per week onsite, with full-time hours of 35 per week. We are happy to discuss flexible working. We offer bonus schemes, a pension of up to 12% with matched contributions up to 6%, award-winning health insurance with rewards and benefits, and life assurance at four times annual salary. We are committed to supporting your health, wellbeing, growth and flexibility, and creating an environment where you can thrive, belong and contribute to our business and society.
last updated 39 week of 2026