Job Description:

An exciting opportunity for an experienced Information Security and Data Governance professional to lead and evolve a company's security, privacy and governance framework. Acting as the organisation's Data Protection Officer, you will oversee regulatory compliance, cyber security, supplier assurance, AI governance and information security certifications, while partnering with senior stakeholders to protect both the business and its customers.

Client Details

Our client is a well-established UK-based software business delivering technology solutions to a large and trusted customer base. With a strong focus on innovation, data protection and responsible use of technology, the organisation is investing in strengthening its security, governance and compliance capabilities to support continued growth and customer confidence.

Description

• Own and develop the Information Security Management System (ISMS) and maintain key security certifications, including ISO 27001 and Cyber Essentials Plus.
• Lead data protection and privacy activities as the Data Protection Officer, providing guidance on UK GDPR compliance, DPIAs and data-sharing arrangements.
• Establish and enhance AI governance frameworks, ensuring responsible and compliant adoption of AI technologies.
  Manage cyber security risk through vulnerability management, penetration testing, incident response and security monitoring.
• Oversee supplier assurance, due diligence, contract reviews and third-party risk management.
• Support client assurance activities, responding to security and compliance assessments and audits.
• Provide security and privacy sign-off for new products, projects and business initiatives.
• Present policies, risks and compliance updates to senior leadership and board-level stakeholders.

Profile

• Strong experience leading information security and compliance programmes.
• Proven knowledge of ISO 27001, Cyber Essentials, UK GDPR and broader risk management frameworks.
• Experience managing audits, security assessments, supplier due diligence and remediation programmes.
• Excellent stakeholder management and communication skills, with the ability to influence at all levels of the organisation.
• Experience in AI governance, privacy management or regulated technology environments would be highly advantageous

Job Offer

• Opportunity to own and shape the information security, privacy and governance agenda across the organisation.
• Broad remit covering cyber security, data protection, AI governance and supplier risk.
• Direct exposure to senior leadership and strategic decision-making.
• Competitive benefits package including private healthcare, bonus scheme, enhanced pension, annual training budget and generous holiday allowance.
• Supportive and collaborative culture with a strong focus on employee wellbeing, development and recognition.