Average Information Engineer salary in the UK

Are you looking to join a global software technology company, with their main base of operations here, in the UK, as an experienced GRC Information Security Analyst? Do you have experience in the GRC Security space with audits, auditors, ISO27001, PCI DSS, SOC2, NIST & current compliance regulations? If so & you are looking to expand your information Security career, meet new team members, embrace new challenges & join a world-class team – we’d like to hear from you! Job title: GRC Information Security Analyst. Global Technology company. Salary: £60K - £65K Basic range + 10% Bonus + Excellent benefits package Location: Central London office. We offer a hybrid workplace, with a LOT of flexibility for remote. However, due to the nature of the role; dealing with external auditors & internal departments, we have put, roughly, 1-2 days per week on this, in office. Some weeks, it may be zero though! Some weeks, it may be 3 days – flexibility is key. If you’re an experienced GRC Security Analyst, you’ll already know what the role will entail, but see below for things we’ll need to see in order to be considered:  - Knowledge and experience of ISO 27001, PCI DSS, SOC2, NIST and CIS benchmarking is essential.  - Knowledge and experience achieving and maintaining compliance with relevant legislation, such as DPA, GDPR  - Knowledge of cloud environments (AWS, Azure) & Windows, &/or Linux environments (To be clear: this is NOT a technical, hands-on role. We have a separate security engineering team for that…) Things we’d love to see, but are not needed to be considered (& you’ll get experience in by joining us):  - IT Security Risk & Compliance automated tooling: Drata, Vanta, One Trust or another.  - If you come with CISA or Lead Auditor certifications, then that would be handy! Reporting directly to the IT Security GRC Director, you’ll need strong communications & internal / external stakeholder management skills. If all the above sounds of interest & you’d like to find out more, please do apply now, or get in touch for a confidential discussion.

Information Security Engineer – Software Company – Worthing, West Sussex(Office based/Hybrid) – 50K to 55K plus excellent benefitsStratospherec is recruiting for an Information Security Engineer to join an exciting software company based in Worthing, West Sussex . In this role you will use your Information Security Engineer expertise both supporting and enhancing this company’s cybersecurity through the securing of enterprise applications, data and infrastructure and by identifying, assessing, and mitigating security risks.This is a hands-on, predominantly office-based role, requiring experience in some or all of the following: application and data security, security administration, penetration and vulnerability assessments, threat monitoring and incident response and security posture enhancement.You will work alongside a multidisciplinary team of infrastructure, support staff and developers, cross-functionally supporting colleagues from across the business to ensure security requirements are met and outstanding customer service delivered.This is an exciting role for someone who is looking to develop their career in cybersecurity for a company that actively prides itself in the professional development of all its employees.To apply you should ideally have :At least 3 to 5 years experience in an information cyber security roleA good knowledge of MITRE ATT&CK, NIST, ISO 27001, and other frameworksExperience with regulatory compliance and auditing standardsKnowledge of penetration testing and vulnerability scanning tools like Nessus and QualysSecurity tooling such as firewalls, VPN#s and Network Traffic analysis.Network protocols TCP/IP. HTTP, DNS,SSHNetwork segmentation familiaritySIEM tools proficiencyA familiarity with scripting languages (Python, Bash, PowerShell) is desirable Certifications (e.g., CEH, OSCP, CISSP, Security+, GSEC) are desirablePlease apply as soon as possible to find out more about this exciting new Information Security Engineer/Analyst role?

Lead Information Security Engineer Location: London | Hybrid (3 days office / 2 WFH)Salary: Competitive + benefitsAre you an experienced information security professional ready to make an impact on a global scale?Our client, a leading international law firm, is seeking a Lead Engineer – Information Security to join their London-based global technology team.This is a key opportunity to take ownership of critical security architecture and strategy across a complex, multi-region enterprise.The RoleAs Lead Engineer, you will be responsible for developing, implementing, and maintaining secure solutions that protect global systems and data.You’ll play a pivotal role in the firm’s cloud transformation journey, ensuring compliance, resilience, and best practice across all regions.Key ResponsibilitiesLead the design and implementation of secure authentication, authorisation, and data protection frameworks.Manage and enhance Data Loss Prevention (DLP) systems, incident response, and risk management processes.Oversee cloud security architecture across Azure, O365, and iManage Cloud environments.Collaborate with global IT, compliance, and risk teams to deliver a consistent security posture.Drive employee security awareness and continuous improvement initiatives.About YouMinimum 5 years’ experience in information security within a global enterprise environment.Strong knowledge of cloud and network security (Azure, O365).Experienced in DLP, SIEM, and incident response processes.Familiar with ISO 27001/27002 and governance frameworks.CISSP or CEH certification preferred.Excellent communication, stakeholder management, and documentation skills.Why Join?You’ll be joining a respected global organisation investing heavily in its security capabilities. This is a high-impact, visible role where your expertise will directly influence global security strategy, innovation, and resilience