Naimuri - Information Security Officer

Location: Role Type: Job Title: Naimuri - Information Security Officer Job Location: Salford Quays, Manchster Job Type: Permanent, Fulltime - onsite Job ID: 20594 The Mission: At Naimuri, we provide the tech that protects. As our Information Security Officer, you will sit at the heart of our mission, bridging the gap between high-level compliance and hands-on technical security. You won’t just be writing policies; you’ll be ensuring they work in the real world. Reporting directly to the Head of Security, you will play a pivotal role in maintaining our reputation as a trusted partner to our customers. The Balance: What You’ll Be Doing: 1. Governance, Risk & Compliance (The "Handoff") Framework Management: Manage and evolve our security management systems, ensuring we remain aligned with security frameworks & standards, e.g. Cyber Essentials Plus & ISO27001. Policy Evolution: Work with the Head of Security to develop and implement security policies that balance the need for security with the agility needed for a modern tech company. Security Auditing: Conduct internal audits and coordinate with external assessors to ensure our security posture is ironclad. Third-Party Risk: Assess the security of our supply chain and software vendors. 2. Technical Security & Operations (The "Hands-on") Collaborative Defence: Work alongside the internal teams to harden our cloud environments (AWS/Azure) and ensure end-user devices (laptops, mobile) are configured securely. Vulnerability Management: Run and remediate vulnerability scans; don’t just report the issues; help figure out how to fix them. Incident Response: Be a key part of our incident response team, investigating alerts and refining our "playbooks" for future threats. Identity & Access: Manage the lifecycle of software licenses and access controls, ensuring the principle of least privilege is always met. Who You Are: The Bridge: You can talk "tech" within a very technical company but also explain "risk" to a non-technical stakeholder. Growth Mindset: You are at a mid-level stage in your career and are hungry to step up. You want a seat at the table where decisions are made. Agile & Dynamic: You thrive in fast-paced environments. You’d rather solve a problem than wait for a ticket to be assigned. Security First: You have a natural "security mindset" you see the vulnerability in the process before it becomes a problem. Your Toolkit (Requirements): Experience: 2-4 years in an Information Security or dual IT/Security role, ideally within a regulated industry or government-adjacent sector. Technical Knowledge: Familiarity with cloud platform security (AWS, Azure, or GCP) and MDM solutions for managing corporate devices. Regulatory Knowledge: Understanding of UK Data Protection/GDPR and ISO 27001. Certification: While not mandatory, certifications such as CompTIA Security+ , SSCP , or CISM are a significant plus. Why Naimuri? People First: Expect a supportive environment that values your mental health and professional development. High Impact: Your work directly supports the safety and security of the UK. Culture: A vibrant Salford-based team with a "work hard, support each other" ethos. Pay and benefits: Naimuri pays competitively within the industry based on your role's base location rates. The salary for this position is dependent upon your experience. We assess seniority relative to the team at Naimuri during the interviewing process. A full time working week is 37.5 hours and you have flexibility over when you give that time. We also offer part-time working, which can be discussed during the recruitment process. Our core hours are 10:00am - 3:00pm and our office is open between 7:30 - 18:00, Monday to Friday. We offer hybrid working where you can work from home for part of your working week with time on site being based on the needs of your assigned delivery and agreed Ways of Working for your team. We would expect that the successful candidate would be working an average of 3 days a week in the office. Depending on the project, you may also be required to travel to a local customer site or occasionally to other locations in the UK. Benefits include: Flexible/Hybrid working options Performance bonus Company bonus Pension matched 1.5x up to 10.5% 25 days annual leave plus bank holidays. AXA group 1 medical cover Holiday purchase scheme (5 additional days) Cycle to work scheme Car benefit scheme Recruitment Process: We are committed to building an inclusive, safe and supportive environment that allows everyone to do their best work, so we strongly encourage candidates of all different backgrounds and identities to apply. We can of course support any accessibility or neurodiversity requirements that you may need during the recruitment process. We want to ensure that you feel comfortable and confident when interviewing with us. To help you prepare, our team will be happy to discuss the process in more detail with you when you apply.