Average Information Security salary in the UK

Head of Information Security - CISSP, CISM, ISO27001, NIST, PCI DSS, GDPR, DevSecOps, Cloud Security, SIEM, SOC, AI Security. Permanent, West London, 4/1 Hybrid. c.£100k +BenefitsHead of Information Security / CISO / Senior InfoSec Consultant required to lead and develop a modern, security-first function within a growing technology business. Reporting to the CTO, you'll combine strategic leadership with a hands-on technical approach, working closely with Engineering, Infrastructure and Operations teams to embed security across the organisation.The role will adopt Information Security strategy, governance, risk and compliance while implementing practical security controls, automation and DevSecOps best practice. This is an excellent opportunity to influence technology strategy, lead security initiatives and help shape a mature, AI-enabled security capability whilst remaining hands-on in the early stages. In time, you will build a small team of InfoSec and Cyber Security Analysts around you.Key Responsibilities:Define and deliver the Information Security strategy, policies and governance framework.Define and develop robust security controls inline with both business practices and compliance requirements inc ISO27001, CE+, SOC2, NIST CSF, GDPR and PCI DSS.Embed Secure by Design and DevSecOps principles across engineering teams.Lead cyber risk management, incident response, threat modelling and vulnerability management using a range of contemporary tools.Drive AI and automation to enhance security operations and threat detection.Oversee third-party security, supplier assurance and client audits.Recruit, mentor, lead and develop the Information Security team.As such,, we're looking for candidates with experience leading Information Security or Cyber Security functions within technology-led organisations. You will possess:CISSP, CISM or equivalent security certification.Strong knowledge of ISO27001, NIST, PCI DSS, GDPR and Information Security Governance.Experience developing security strategy, GRC and cyber risk programmes including definition of security controlsStrong technical knowledge across cloud, network, endpoint, application and data security.Experience with SIEM, SOC, vulnerability management and incident response.Knowledge of DevSecOps, security automation and modern cloud environments.Excellent communication, stakeholder management and leadership skills.You may have been working as a CISO, Information Security Manager, Cyber Security Consultant or within another senior InfoSec/CyberSec capacity which has granted you experience in both security control definition and hands-on practical management of security threats and incidents including vulnerability scanning and penetration testing.This is an outstanding opportunity to join a forward-thinking medium sized global organisation where you'll shape the security strategy, influence technology direction and build a modern Information Security function using the latest cloud, automation and AI technologies.Location is commutable from West London, Middlesex, East Berkshire, North Surrey, South West London and parts of South London (Croydon etc). Accessible via District Line (West) and some mainline services.

Senior Information Security Manager, Risk, Compliance, Security, London, Hybrid / Remote to £65,000A leading independent authority are requiring a Senior Information Security Manager to play a pivotal role in their Compliance team. The Reporting to the Head of Compliance, you will lead the ISO 27001-certified information security management system, strengthen processes, and help shape policy. In this role, you will play a key part in ensuring information risk is managed effectively, overseeing security governance and standards, conducting audits and monitoring, and ensuring policies and processes continue to improve. Your work will be essential in providing assurance that data is secure.The ideal candidate will have broad experience across information security and governance, including most of the following: identifying and assessing information risk, managing controls, carrying out internal and third-party audits, improving processes, developing training and guidance for staff, managing and reviewing incidents, and contributing to policy development.The key responsibilities of this role are to oversee information security standards by managing and continually improving ISO 27001-certified Information Security Management System, leading business continuity management for information and technology risks, and supporting the organisation’s development of a proportionate quality management approach, including work towards ISO 9001 certification. Essential criteria:You may already be leading information security governance in a smaller organisation, or you may have built strong experience as a key member of a larger information security or governance team. They are looking for someone with at least three years’ experience, ideally five, working in an ISO 27001-certified environment. A CISSP or similar professional or academic qualification is preferred, and an understanding of quality management, or a willingness to develop it, would be an advantage. A minimum of 3 years of work experience in an information security governance role within an ISO 27001 certified environment ISO 27001 Lead Implementer or Lead Auditor certification CISSP, or a degree or equivalent level 6 or above qualification with an information security focus, or computer science or similar including relevant security modules Skills and core competencies:Good knowledge of current information security threats and best practices for information security management and governance Delivery focused with excellent organisational skills and attention to detail Capable of building and maintaining strong working relationships across teams and working through ambiguity Motivated to find practical solutions, yet willing to escalate significant risk Confident user of Microsoft tools and comfortable developing skills for use of new technologies

Information Security GRC Analyst6 Months£45k FTC or £450/Day Inside IR35 LondonWe are seeking an experienced Information Security GRC Analyst to support the delivery of Governance, Risk and Compliance (GRC) services for a leading organisation.The Information Security GRC Analyst role will be an initial 6 month contract, and can be offered as either a FTC with a salary of between £30 - £45k, or day rate contract between £350 - £450/Day Inside IR35 on an umbrella solution. The role is based in London and will be office based 2 days per week and the remainder remote.You will work with senior stakeholders, technology teams and security leadership to strengthen the organisation's cyber security posture through risk management, compliance assurance and security governance. This role suits a security professional who can provide practical, risk-based advice in a client-facing environment.Key ResponsibilitiesSupport GRC activities aligned with ISO 27001, NIST Cybersecurity Framework, Cyber Essentials and GovAssure.Conduct information security risk assessments across business processes, projects, technology platforms and third-party suppliers.Maintain risk registers, track remediation actions and support cyber risk management.Produce security policies, standards, assessment reports, compliance evidence and executive reporting.Support audits, control reviews, assurance and compliance assessments.Engage stakeholders, facilitate workshops and gather evidence to support security initiatives.Contribute to supplier assurance and third-party risk management.Improve security governance processes and controls.Support security best practices, data governance and Secure by Design principles across operational, recovery and transformation workstreams.Essential skills3-5 years' experience in Information Security, Cyber Security, GRC, IT Audit or Risk Management.Experience in security risk assessments, control reviews and audit or compliance activities.Strong understanding of security governance, risk management and ISO 27001.Familiarity with NIST Cybersecurity Framework and Cyber Essentials.Strong stakeholder engagement, communication, report writing and presentation skills.Ability to communicate security concepts to technical and non-technical audiences.DesirableExperience in government, public sector, regulated or enterprise environments.Knowledge of GovAssure and public sector security requirements.Familiarity with Microsoft Azure and AWS.Experience with GRC platforms and risk management tools.Understanding of Secure by Design and security architecture principles.CertificationsOne or more of the following would be advantageous:ISO 27001 Lead Implementer or Lead AuditorSecurity+CGRCCISACRISCCISSP / Associate CISSPIf you are interested in the above, hit the Apply now button!Information Security GRC Analyst, Information Security Analyst, Information Security GRC Analyst , Security Analyst, Information Security GRC Analyst , GRC Analyst, Information Security GRC Analyst, ISO27001, Azure, AWS, NIST, Cyber essentials, analyst, Information Security, GRC, IT audits, Risk ManagementCircle Recruitment is acting as an Employment Agency in relation to this vacancy. Earn yourself a referral bonus if you refer somebody else who fills the role! We also offer an iPad if you refer a new client to us and we recruit for them. Follow us on Facebook - Circle Recruitment , Twitter - @Circle_Rec and LinkedIn - Circle Recruitment.