Information Security Officer

November 3, 2026

Office

Senior

Biggin Hill, United Kingdom

Indeed

Keep in mind

Office-only work

Description

An Information Security Officer is sought to join the IT department, reporting to the Information Security Compliance Manager. The role delivers the organisation's Information Security Governance, Risk and Compliance projects and activities, covering security controls, risk assessments, policies, supplier audits, data governance and GRC metrics. The position is based in Biggin Hill with benefits including private healthcare and a staff shuttle service.

Responsibilities

Lead monitoring and management of compliance programs aligned to ISO 27001, PCI DSS and GDPR
Support the definition and growth of the Security Control Framework across business functions
Provide expertise in risk management and assess security risks reported through dashboards, reports and workshops
Create, review and maintain security policies, standards and procedures across technology projects and services
Manage third party supplier security and compliance assessments and outline security improvement steps
Coordinate internal and external security audits through delivery, evidence gathering and reporting
Support data governance and security strategy across discovery, processing, storage, classification, retention and disposal
Define and monitor security GRC performance metrics and present updates to senior stakeholders
Support the use of Artificial Intelligence with tooling to ensure policies and procedures are adhered to

Requirements

Successfully led information security GRC focused programs including risk management activities
Vendor and third party audit and compliance management experience
Knowledge of security compliance and regulatory requirements such as ISO 27001, PCI DSS and GDPR
Experience with Incident Response and Business continuity / Disaster Recovery planning and testing
Experience with Data governance and Data Loss Prevention projects
Understanding of legal and regulatory frameworks relevant to information security
Security architecture, engineering or operations experience is desirable
Understanding of security tools and technologies such as AV, SIEM, DLP and CASB
Current UK driving license required for this role
Ability to cope under pressure and manage multiple important projects simultaneously
Ability to communicate with both technical and non-technical audiences
CISSP / CISM and ISO27001 LI/LA qualifications are desirable but not essential
Enthusiastic about driving security improvements across the company and wider industry

Conditions

Full-time employment
Rotating shift supporting events and schedules across different time zones
Private healthcare scheme and dental care
Four Grand Prix Paddock passes per season
Enhanced maternity and paternity leave and family planning policies
Free staff shuttle service to surrounding train stations near Biggin Hill
Subsidised canteen serving breakfast and lunch plus free healthy snacks
25 days annual leave plus 8 Bank Holiday days and Christmas closure
Opportunities to develop and request training via the in-house Learning and Development team
Discount on merchandise and experiences plus Perkbox benefit portal