Job Search

An opportunity has arisen for an Information Security Officer to support the development, implementation and continuous improvement of effective information security practices. The successful candidate will help protect information assets, systems and services from evolving threats while promoting a strong culture of security across the organisation.

Responsibilities will include maintaining information security policies, standards and procedures; supporting risk assessments; monitoring compliance with relevant legislation and regulatory requirements; and assisting with the management of security incidents. You will contribute to vulnerability management, access control reviews, security testing and the investigation of suspected breaches. The role will also involve supporting business continuity and disaster recovery planning, maintaining accurate security documentation and preparing reports for senior stakeholders.

You will work closely with technical teams, service owners and colleagues across the organisation to provide practical advice on information security risks and appropriate controls. The postholder will help deliver security awareness and training activities, assist with audits, track remedial actions and support the ongoing improvement of governance and assurance arrangements.

Applicants should have experience in an information security, cyber security, IT risk or compliance environment, with a sound understanding of security principles, risk management and incident response. Knowledge of recognised frameworks and standards such as ISO 27001, the NIST Cybersecurity Framework or the Cyber Essentials scheme would be advantageous. Relevant professional qualifications, or a willingness to work towards them, are desirable.

You will need strong analytical and problem-solving skills, excellent written and verbal communication abilities and the confidence to engage with stakeholders at all levels. A methodical approach, keen attention to detail and the ability to prioritise competing demands are essential. You should be able to explain technical risks clearly to non-technical audiences and demonstrate integrity, discretion and a commitment to protecting sensitive information.

We are seeking an experienced Information Governance and Data Protection Lead to act as the organisation’s Data Protection Officer (DPO) on a part-time, remote basis. This is an influential role responsible for promoting a strong culture of privacy, accountability and secure information management across the organisation. You will provide independent advice and guidance on data protection obligations, monitor compliance with applicable legislation and support teams in managing personal and sensitive information appropriately.

Key responsibilities will include maintaining and improving data protection and information governance frameworks, policies, procedures and records; advising on privacy implications of new projects, systems, processes and supplier arrangements; and overseeing Data Protection Impact Assessments, legitimate interest assessments, data-sharing agreements and records of processing activities. You will monitor compliance through audits, reviews and reporting, identify risks and recommend proportionate remedial actions. The role will also involve managing and coordinating responses to data subject rights requests, personal data breaches and regulatory enquiries, including investigation, documentation and escalation where required. You will deliver practical training and awareness activities, promote good information-handling practices and provide clear reports to senior stakeholders and relevant governance forums.

Applicants should have substantial experience in data protection, privacy, information governance or a closely related discipline, with a strong working knowledge of the UK GDPR, Data Protection Act 2018 and associated regulatory guidance. A recognised privacy or information governance qualification, such as CIPP/E, CIPM, BCS or equivalent, would be advantageous. You will be confident interpreting complex requirements, balancing risk with operational needs and communicating effectively with colleagues at all levels. Excellent analytical, organisational and written skills are essential, along with discretion, sound judgement and the ability to work independently while collaborating effectively in a remote environment. This part-time opportunity offers flexibility and the chance to make a meaningful contribution to responsible data management and regulatory compliance.