Information Security Officer

Job description

**Hello,** We are **Recognise Bank;** a modern business bank built to support the UK’s SMEs with tailored lending and savings solutions. Founded in 2017 by experienced business owners, we set out to challenge traditional banking by offering more flexibility, understanding, and practical support to help businesses thrive. Since receiving our banking licence in 2021, we’ve built a loyal customer base and a strong, diverse team that puts people first. Our vision is **building stronger futures with bespoke financial solutions**. We understand that no two financial needs are the same, which is why we work closely with UK SMEs and individuals to unlock potential others often overlook. Through smart, flexible lending and savings products, we’re here to **build and grow stronger futures for lasting success**. Our values shape how we work and grow together: 💪 **Can do, will do:** We take ownership, solve problems, and adapt as our customers’ needs evolve. ✨ **Be brilliant:** We show up with curiosity and energy, always striving for better. 🤝 **Do the right thing:** We act with integrity, responsibility, and care in everything we do. 💡**Make a difference:** We focus on impact, helping our customers, colleagues, and communities succeed. **About the role** Sitting in our 2nd Line Function, the Information Security Officer (ISO) plays a pivotal role in helping the bank achieve its growth ambitions in a compliant and secure manner. Working with the Chief Risk Officer and Data Protection Officer the role holder will ensure the bank has robust and proportionate policies, standards and control frameworks in place. Working with 1st Line colleagues from across the bank, but particularly those responsible for Information Security, IT, Operational Resilience and the management, storage and use of data, will provide independent assurance of the efficacy of the control environment and support the delivery of projects and transformational change. A trusted expert and critical friend, the individual will be responsible for working directly with the bank’s Executive Team and Board to ensure they have a transparent understanding of the bank’s risk posture and responsible for increasing Information Security awareness, skills and understanding across the bank. ### Key Responsibilities - Security Governance, Policy & Reporting - Cyber Security - Security Awareness & Training - Data Loss Prevention & Insider Risk - Data Protection & Privacy - IT Infrastructure Oversight - Incident Management & Operational Resilience - Risk Leadership ### Corporate Responsibilities - Read and follow all relevant company policies and procedures - Adhere to all risk-related responsibilities applicable to your role, as set out in the Risk Management Policy - Abide by all compliance and financial crime related policies, procedures and reporting obligations applicable to your role - A Material Risk Taker for the bank you will need to act in accordance with regulatory expectations of a Certified individual ### Required Skills & Experience - A minimum of 5 years’ experience in a second line information security, GRC or data protection role within a UK regulated financial services firm. - Working knowledge of PRA and FCA expectations, UK GDPR, PECR and operational resilience requirements. - Experience running security awareness programmes, including phishing simulations and e-learning platforms. - Working knowledge of Microsoft Purview 9DLP< Insider Risk management, Communication Compliance) and the wider Microsoft E5 security stack. - Experience responding to internal and external audits and drafting Board and committee papers. - Experience of third-party security due diligence and supplier risk assessments - Relevant certifications such as CISSP, CISM, CRISC, CIPP/E or ISO 27001 Lead Auditor (desirable).