Information Security Specialist

In this role you support the organisation’s ISMS and governance to strengthen security, risk, and compliance. You will work across IT, business teams and third parties to improve the security posture and deliver ISO 27001-aligned controls. The position offers breadth across governance, risk, compliance, and security operations within an established organisation. You will engage with stakeholders to drive practical security improvements and training. This is a hands-on, impact-focused opportunity at scale.

• Conduct information security risk assessments
• Support security audits, compliance and risk management
• Monitor security alerts, threats and vulnerabilities
• Support incident investigation and response
• Coordinate vulnerability assessments and penetration testing
• Review security requirements for new systems and projects
• Support third-party and supplier security assessments
• Develop security awareness initiatives and training
• Monitor controls across endpoint security, firewalls, encryption, identity management and MFA
• Produce security metrics, reports and dashboards

• 3+ years’ experience in information security, cybersecurity, IT risk or compliance
• A relevant degree in Cybersecurity, Information Security, Computer Science, IT or similar
• Knowledge of ISO 27001 and/or NIS2
• Experience with security audits, risk assessments and compliance
• Knowledge of Identity & Access Management, Security Monitoring, Endpoint Security, Vulnerability Management, Network Security and Incident Response
• Experience with Microsoft 365, Azure and Entra ID
• Strong communication, analytical and problem-solving skills
• Ability to communicate technical security concepts effectively to non-technical stakeholders

• Strong communication
• Analytical thinking
• Problem-solving
• ISO 27001 / NIS2 knowledge
• Identity & Access Management
• Security Monitoring