Information Security Officer

About the Role 

We're looking for an Information Security Officer to help drive and coordinate Nucleo's information security, governance and compliance activities. This is a high-impact role that works closely with the COO, Information Security Management Forum (ISMF), IT Manager and business stakeholders to maintain and continually improve our Information Security Management System (ISMS), support ISO 27001 certification, and strengthen our overall security posture. The role is ideally suited to someone who enjoys working across teams, influencing positive change, and balancing security, compliance and business objectives in a practical way. 

What You'll Do 

• Coordinate and support Nucleo's ISO 27001 programme, including certification and surveillance audits. 
• Help maintain and continuously improve the ISMS. 
• Coordinate audits, compliance reviews and control monitoring. 
• Coordinate review of, and support, policies, standards, and procedures. 
• Embed security and compliance across the business. 
• Support incident coordination, risk management, security awareness, supplier assurance and reporting. 
• Contribute to bids, tenders and customer assurance activities. 

What Success Looks Like 

• Influences and collaborates effectively across teams. 
• Takes a practical approach to security and risk. 
• Communicates clearly with stakeholders. 
• Demonstrates organisation, initiative and continuous improvement. 

Why This Role? 

An opportunity to shape Nucleo's security and compliance capability, work closely with senior leadership and support the company's continued growth. We encourage applications from employees who may not meet every requirement but can demonstrate strong transferable skills and interest in the area. 

Skills & Experience - Essential 

• Experience in information security, governance, compliance or risk. 
• Knowledge of ISO 27001 and ISMS frameworks. 
• Strong stakeholder management and communication skills. 
• Experience supporting audits and compliance activities. 
• Understanding of GDPR and information security principles

Skills & Experience - Desirable 

• Cyber Essentials, NIS2 or similar frameworks. 
• GDPR compliance experience. 
• Customer assurance questionnaire experience. 
• Relevant security, audit or data protection certifications. 

Nucleo standard company benefits