Senior Information Security OfficerUp to £85,000 + 16% bonus Bournemouth (preferred), Stockport or London Permanent Want a senior security role where you actually get to do security, not just write about it? This is a hands-on role with a well-known UK health and life insurer that is investing in its information security function. You will own information security across the UK business, make ISO 27001 work in the real world, and build a team around you as it grows. What you will be doing Owning the ISMS and ISO 27001 compliance, and extending it across the wider UK group Managing information security risk in line with the enterprise risk framework Getting security into projects from day one, across the SDLC, including DPIAs Assessing and managing supplier security risk alongside the Cyber Security Operations Lead Owning the security policies and standards, and making sure people actually follow them Running the security awareness and training programme Chairing security committees and reporting to senior risk owners Leading the team: an Information Security Analyst to start, growing to 3 plus a consultant What you will bring 7+ years in information security CISSP, CISM, CISA, an MSc or equivalent Hands-on ISO 27001 experience, plus frameworks such as NIST and PCI DSS Information security risk management and supplier assurance Working knowledge of FCA, PRA, ICO and GDPR requirements The ability to explain technical risk to non-technical people and bring them with you ..... full job details .....