Average Information Officer salary in London

Senior IT Security Officer £70,000We're looking for an Senior IT Security Officer to join a an innovative, market-leading company. Working closely with all the senior leadership to determine strategic priorities and being the Security SME of the organisation providing your guidance and steer on projects across the business.Working in the Security team, the Senior Information Security Consultant will be reporting into the Head of Security Strategy and Transformation and will gain fantastic exposure across the business as well as IT. You will need strong IT Security knowledge and be able to interact with both technical and non-technical stakeholders.What you'll bring: * Proven experience working in an Information Security role previously implementing information security controls across a range of technologies, e.g., Security Architect, or Security Project Lead* A strong customer focus to ensure internal stakeholder needs are met* Experience of cloud technologies* Information Security risk management processes and best practice* Disciplined and organised mind-set with a good attention to detail* Excellent communication and interpersonal skills, including the ability to negotiate and resolve conflict* Excellent time management skills, including the ability to manage a demanding and variable workload with tight deadlines* Good reasoning skills and the ability to clearly identify key issuesDesirable:* CISSP, CISM or other equivalent foundational security qualifications or experience* CEH, OSCP, GIAC or other penetration testing security qualifications or experience* SABSA, SANS or other technical architecture qualifications* SAFE, Scrum, or other Agile methodology experience* Data Protection, Risk, Legal or HR qualifications or experienceIf this role round like your next career move click "Apply". #LI-PB1

Job Opportunity: Information Security Officer Are you an experienced Information Security professional ready to take on a dynamic role within a fast-paced, highly regulated financial institution? We are seeking a dedicated and skilled Information Security Officer to drive security strategies, manage risk, and lead our organisation's information security initiatives. As the Information Security Officer, you will report directly to senior leadership and play a critical role in ensuring the confidentiality, integrity, and availability of the organisation's information assets. You will lead the development, implementation, and maintenance of security frameworks and policies while ensuring compliance with regulatory and industry standards. Key Responsibilities Strategic Collaboration: Work closely with IT and business units to integrate security measures into operational processes and provide expert advice on security-related matters.Project Oversight: Oversee second-line security risk assessments for new products, systems, and significant business changes.Policy Development: Assist in developing and maintaining robust information security policies, standards, and procedures, and ensure they are effectively communicated across the organisation.Awareness & Training: Design and deliver security awareness programmes to foster a strong security culture within the organisation.Compliance & Reporting: Coordinate with stakeholders to ensure adherence to internal and external regulatory requirements and present security updates to the Information Security Management System (ISMS).Incident Management: Lead the response to security incidents and collaborate with internal teams and external partners to manage threats effectively.Cloud Security: Define and implement security controls for cloud-based solutions in collaboration with leading providers such as AWS, Azure, and Google.Third-Party Security: Manage vendor assessments and mitigate supply chain security risks to ensure the integrity of external partnerships.Innovation & Evaluation: Evaluate emerging technologies and conduct proof-of-concept initiatives to enhance the organisation's security posture. Experience & Skills Required Work Experience: Significant experience in Information Security and Cyber Risk Management within the financial services industry.Knowledge of banking products and services, coupled with experience in cross-functional environments.Proven ability to assess and communicate Technology and Cyber risks in a clear and concise manner.Hands-on experience in developing and implementing security controls for cloud infrastructure and DevOps environments.Familiarity with the audit and assurance lifecycle in regulated financial institutions. Technical Skills: Bachelor's degree in Information Technology or a related field.5+ years of experience in Information Security.Industry certifications such as CISA, CISM, CISSP, ISO 27001, or equivalent.Technology and Cyber Governance Frameworks (ISO 27001, NIST, COBIT).Cloud Security Architectures (AWS, Azure, Google).Threat and Vulnerability Management.Incident Detection and Response.Data Governance and Risk Escalation.

Senior Information Management and Governance Officer Data Protection and Information Rights lead (Grade E3)FTC until August 2025 (Maternity cover)Edinburgh/Hybrid£46,392 - 54,003 per annum Everything we do at the Scottish Funding Council (SFC) aims to create the right environment for colleges and universities to thrive. The Scottish Funding Council is Scotland’s tertiary education and research authority. Our ambition is to make Scotland an outstanding place to learn, educate, research, and innovate - now and for the future. So, naturally, we have a clear focus on recruiting the best people and developing them throughout their career. We invest around £2 billion every year, and our funding?enables colleges and universities to provide life-changing opportunities for over half a million people.? We’re not only looking for the best people to come and work for us, but also people who will connect with our guiding principles which include working in partnership, championing diversity, and supporting sustainability for future generations. By fostering our guiding principles, we are very proud of the inclusive working environment that we have created. We are committed to attracting people of all backgrounds: we want our colleague base to reflect the people and communities that we serve. Job Summary Reporting to the Assistant Director, Information Governance you will lead on responding to information rights requests and fulfil the role of the Data Protection Officer - a key role within SFC.As an experienced Information Rights and Data Protection practitioner, you will be skilled in dealing with sensitive, complex information at pace, building trusted relationships with colleagues across SFC, and you will exercise good judgement in responding to information rights requests. You will be expected to work flexibly across the responsibilities of the information governance team, stepping in to provide cover and support when required to ensure deadlines are met. Key Responsibilities Leading the response to information rights requests, providing advice to colleagues across SFC, ensuring legal compliance with relevant legislation.Provide an efficient and effective senior contact point for queries in relation to information rights and data protection including complex ones.Ensure staff fully understand their responsibilities within data protection legislation and information rights and follow relevant processes, evidenced through reporting and auditing.Promote an information governance culture and an understanding of data protection compliance throughout the organisation.Develop and maintain effective coordination and liaison with our stakeholders and external partners.Identify opportunities to improve ways of working within Information Governance and implement positive change.Develop and maintain SFC’s Records of Processing Activities (RoPA) to ensure that it is accurate and regularly reviewed and information asset owners understand their responsibilities.Co-ordinating with Information Governance colleagues, assess and respond to personal data breaches, including reporting to senior management and the ICO as required.Identify and implement improvements to data protection and information rights compliance based on user requirements and best practice.Monitoring SFC’s compliance with the UK GDPR and other data protection laws and with our data protection policies, raising awareness of data protection issues, training staff and conducting audits. Person specification It is important through your CV / Cover Letter that you give evidence of proven experience of each of the following essential criteria: Essential Requirements: Experience of leading and working within data protection and information rights and evidence of supporting an organisation in its compliance with relevant legislation.An excellent understanding of the legal and regulatory landscape of all aspects of information governance (freedom of information, records management, information security for example) and how they apply to this role.Evidence of personal commitment to continuous professional development relating to relevant legislative changes and best practice.Ability to demonstrate good judgement when analysing and responding to complex issues.Excellent oral and written communication skills, including experience of drafting reports, policies, procedures, communications to staff (with varying degrees of expertise), and responses to information rights requests.Excellent interpersonal skills, including the ability to build effective relationships, work collaboratively and take account of others’ perspectives.Ability to work autonomously, take ownership of work, and prioritise tasks and time appropriately.Excellent organisational and planning skills, including the ability to work calmly and at pace and the flexibility to manage a diverse range of priorities.Qualified to SCQF Level 9 (Degree) or equivalent experience. Additional informationLocationSFC offers hybrid working for its employees. This means that whilst the role is based at our Edinburgh office, there is substantial opportunity to work from home most of the time. As a rule of thumb SFC expects that a minimum of one day a month in the office will achieve the benefits of its hybrid approach, however it is for the employee and their line manager to agree the balance between home and workplace working - determined primarily by business need. Please be aware that this role can only be worked from within the UK and not overseas. Relocation expenses are not available. Rewards and benefits will be explained later in process.