The client is seeking an experienced Information Security Officer to help drive the security strategy, governance, and risk management activities across cloud and technology environments. You will work closely with technology and business teams to identify security risks, implement effective controls, and ensure solutions are designed and operated securely.
This is a highly visible role requiring strong technical security expertise, stakeholder management skills, and experience securing modern cloud platforms.
Key Responsibilities - Drive the implementation and continuous improvement of information security controls.
- Identify, assess, and mitigate security risks across applications, infrastructure, and cloud environments.
- Conduct security reviews, vulnerability assessments, and risk analysis.
- Analyse security findings and coordinate remediation activities with engineering teams.
- Review application and infrastructure security controls and recommend improvements.
- Support secure solution design and ensure alignment with security policies and best practices.
- Provide security guidance on architecture, cloud platforms, and technology initiatives.
- Work with stakeholders to balance security, risk, and business objectives.
- Contribute to the development of security standards, governance processes, and technology roadmaps.
Required Experience - Strong experience within Information Security, Cyber Security, Risk Management, or Security Architecture.
- Hands-on knowledge of AWS and/or Google Cloud Platform (GCP) security architectures.
- Experience securing cloud services including networking, compute, storage, IAM, and infrastructure services.
- Strong understanding of cloud security frameworks and best practices.
- Knowledge of security and compliance frameworks such as NIST, ISO 27001, and CSA STAR.
- Experience conducting security risk assessments and managing remediation activities.
- Strong stakeholder management and communication skills.
- Ability to explain complex security concepts to both technical and non-technical audiences.
Desirable Skills - Experience with Infrastructure as Code security (Terraform, CloudFormation).
- Cloud security certifications such as CISSP, CISM, CCSP, AWS Security Specialty, AWS Solutions Architect, or GCP Professional Cloud Security Engineer.
- Previous experience within a large-scale enterprise or regulated environment
Reasonable Adjustments:
Respect and equality are core values to us. We are proud of the diverse and inclusive community we have built, and we welcome applications from people of all backgrounds and perspectives. Our success is driven by our people, united by the spirit of partnership to deliver the best resourcing solutions for our clients.
If you need any help or adjustments during the recruitment process for any reason, please let us know when you apply or talk to the recruiters directly so we can support you.