Average Information Security salary in London

Global Information Security & Cyber Security Director As the Global Head of Information & Cyber Security, you will implement and oversee technical and process security controls and lead continuous improvement programs to address evolving threats and risks. This role demands in-depth knowledge of system technologies and current information security frameworks, regulations, vulnerability management, incident response, secure development, cyber security operations, and risk management. Starting as the Information Security lead, you will develop a global strategy, define necessary roles and skills, recruit and onboard staff, and provide ongoing coaching and mentoring. You must assess business risks through a security perspective, offering expert support and guidance. This collaborative role involves ensuring compliance with ISO27001, PCI-DSS, and other frameworks, managing senior leadership on security strategies, and leading your team to meet high standards. Key Responsibilities and Duties Develop and maintain a business-aligned Information and Cyber Security strategy and operating model.Establish and implement an Information Security Policy Framework compliant with relevant legislation and industry standards.Advise the Executive and Senior Leadership on integrating security into strategic and operational processes.Drive strategy and encourage best practices among stakeholders.Create and manage strategic plans, budgets, and operational improvements, ensuring cost-effectiveness.Collaborate with internal stakeholders to stay updated on technological and business changes affecting security.Monitor cyber threats and respond to incidents proactively and reactively.Ensure the business's security posture meets customer and partner needs, creating reusable security documentation.Work with Legal and Compliance teams on Data Security, GDPR, and compliance standards.Ensure client and supplier compliance with security policies and processes.Participate in tool selection, implementation, and monitoring from a security perspective.Oversee third-party services to maintain infrastructure service levels and compliance.Implement and manage global standards, compliance, and accreditation, expanding from group to data centers across Europe and APAC. **This will be an on-site role, due to the sensitive nature of their business, 5 days a week in London Victoria, but they invest in their staff with excellent pension and a £7 a day lunch allowance** If the role appeals then please send your CV ASAP so that we can discuss further.

WE Talent are hiring an Information Security Manager to lead and manage our client’s Information Security Management System (ISMS). This role is crucial in achieving and maintaining ISO 27001 and Cyber Essentials certification and ensuring compliance with audit requirements. Key Responsibilities: Lead the development, implementation, and maintenance of the ISMSAchieve and maintain ISO 27001 and Cyber Essentials certificationEnsure compliance with AAF 01/20 audit requirementsProvide expert advice on Information Security to colleagues and clientsManage security incidents, risk assessments, and vulnerability assessmentsDevelop and deliver security awareness and training programs Requirements: 5+ years of experience in Information Security ManagementProven experience with working to achieve ISO 27001 and Cyber Essentials certificationStrong understanding of information security principles, standards, and best practicesRelevant certifications (CISSP, CISM, ISO 27001 Lead Implementer/Auditor) are desirableFamiliarity with AAF 01/20 audit requirements is a plusExperience of working in an FCA regulated business is a preference Our client offers: Remote working with the ability to attend regional offices for meetings and socials (please note you must be located in England as you will be travelling into local offices)25 days holiday plus bank holidaysLife assurancePrivate health careAnnual bonus If you are an experienced Information Security Manager, we encourage you to apply to join a standout company that values its team and fosters growth. If you are shortlisted, we’ll contact you to provide a full role description and discuss the company culture before your introduction to our client. WE Talent acts as an employment agency for permanent recruitment. By applying for this job, you accept the Privacy Policy and Disclaimers which can be supplied on request.

We are looking for a highly skilled and motivated Information Security Analyst to join our team. In this role, you will play a crucial part in evaluating cybersecurity controls, conducting risk assessments, and collaborating with cross-functional teams. You will support our Information Security Manager in maintaining all aspects of information security risk management, responding to security inquiries and incidents, and ensuring compliance with relevant regulatory requirements. Key Responsibilities: * Support the delivery of the Information Security Management System and drive continuous improvement in information security. * Evaluate and assess cybersecurity controls across the business and third-party vendors to ensure compliance with the NIST Cyber Security Framework (CSF). * Conduct comprehensive risk assessments using the NIST CSF. * Identify cyber threats, risks, and issues using risk management techniques. * Develop and conduct third-party vendor security assurance activities. * Collaborate with cross-functional teams to develop and implement risk management activities. * Respond to security support tickets and provide information security support and escalation. * Create and collect metrics, validate security control performance, and identify emerging cyber risks. * Collaborate with the Enterprise Risk Management (ERM) team to maintain, develop, and deliver cyber risk reporting and appetite statements. * Maintain and develop Information Security policies and procedures relevant to the current cyber threat landscape. * Maintain, develop, and test the Cyber Incident Response Plan. * Monitor and manage compliance with relevant cybersecurity regulations. * Manage actions and output from stakeholder engagements, including customers, regulators, and auditors. * Stay current with emerging security trends, threat intelligence, industry standards, and security-enhancing technologies. Essential Skills, Knowledge & Experience: * Proven experience in an Information Security role. * Experience working in a professional or financial services environment. * Hands-on experience conducting cyber risk assessments and developing mitigation strategies. * Experience with cybersecurity control assessments and maintaining risk reporting and appetite statements. * Knowledge and experience with recognized security frameworks such as NIST CSF, ISO27001, etc. * Experience managing and maintaining cybersecurity compliance with regulatory frameworks such as FCA, PRA, NYDFS. * Experience developing a governance framework by maintaining policies and procedures. * Ability to meet agreed deadlines and work independently or collaboratively. * Knowledge of Microsoft systems (on-premise and Azure cloud), technologies, infrastructure, and systems management tools. * Ability to respond positively to exceptional events in information security. This is a fantastic opportunity to contribute to a company committed to continuous improvement in information security during a time of digital transformation and growth. If you are passionate about cybersecurity and meet the above criteria, we would love to hear from you.