Senior Information Security Officer

Team – Information Security 

Working Pattern - Hybrid – 2 days per week in the Vitality Bournemouth, London or Stockport Office. Full-time hours apply. 

We are happy to discuss flexible working!  

Top 3 skills needed for this role:

• Proven security governance expertise
• Strong information risk judgement
• Credible stakeholder communication

What this role is all about

Play a key role in shaping the future of Information Security at Vitality. As our Senior Information Security Officer, you’ll lead on security governance and risk, strengthen our ISO 27001 framework and bring clear, practical security thinking to key business decisions. From strategic projects and suppliers to regulatory requirements, you’ll influence across the business, drive continuous improvement and support the development of our wider Information Security Strategy. 

What you will be doing

• Lead the continuous improvement and maintenance of the Information Security Management System and ISO 27001 compliance across the Vitality UK Group
• Manage information security risks in line with the Enterprise Risk Framework, ensuring appropriate controls, ownership and reporting are in place
• Deliver strategic information security initiatives and projects aligned with the wider Information Security Strategy
• Provide authoritative guidance on regulatory requirements, data protection and security frameworks including ISO 27001, NIST, PCI DSS and GDPR
• Oversee security governance across projects, procurement and development activity, ensuring risks are addressed throughout the SDLC and DPIA process
• Maintain information security policies, standards, procedures and guidance, ensuring they remain effective and aligned with emerging requirements
• Develop and deliver planned compliance reviews, track identified gaps and ensure agreed remediation activity is completed
• Chair security committees, produce governance and risk reporting for senior stakeholders and represent Vitality at relevant external forums
• Lead and support the Information Security Analyst while building strong relationships across the business to strengthen security awareness and accountability

 What do you need to thrive?

• Extensive experience working in information security, with strong knowledge of governance, risk management and regulatory compliance
• Professional security qualifications or certifications such as CISSP, CISM, CISA, an MSc or an equivalent recognised qualification
• Proven experience managing ISO 27001 and other security governance frameworks such as NIST or PCI DSS
• Strong understanding of data protection and regulatory requirements including GDPR, FCA, ICO and PRA expectations
• Experience assessing and managing supplier security risks
• Experience supporting projects throughout the SDLC, including working within Agile delivery environments
• The ability to translate complex technical and regulatory requirements for non-technical stakeholders and senior decision-makers
• Strong policy, standards, governance reporting and project documentation experience

So, what’s in it for you?

• Bonus Schemes – A bonus that regularly rewards you for your performance
• A pension of up to 12%– We will match your contributions up to 6% of your salary
• Our award-winning Vitality health insurance – With its own set of rewards and benefits
• Life Assurance – Four times annual salary

These are just some of the many perks that we offer! To view the extensive range of benefits we offer, please visit our careers page. Fantastic Benefits. Exciting rewards. Great career opportunities!

If you are successful in your application and join us at Vitality, this is our promise to you, we will:

• Help you to be the healthiest you’ve ever been
• Create an environment that embraces you as you are and enables you to be your best self
• Give you flexibility on how, where and when you work
• Help you advance your career by playing you to your strengths
• Give you a voice to help our business grow and make Vitality a great place to be
• Give you the space to try, fail and learn
• Provide a healthy balance of challenge and support
• Recognise and reward you with a competitive salary and amazing benefits
• Be there for you when you need us
• Provide opportunities for you to be a force for good in society

We commit to all these things because we want you to feel that you belong, and are supported to be happy and healthy.