Senior Information Security Officer

About The Role
Team Information Security
Working Pattern - Hybrid 2days per week in the Vitality Bournemouth, London or Stockport Office.Full-time hours apply.
We are happy to discuss flexible working!

Top 3 skills needed for this role:

• Proven security governance expertise
• Strong information risk judgement
• Credible stakeholder communication

What this role is all about
Play a key role in shaping the future of Information Security at Vitality. As our Senior Information Security Officer, youll lead on security governance and risk, strengthen our ISO 27001 framework and bring clear, practical security thinking to key business decisions. From strategic projects and suppliers to regulatory requirements, youll influence across the business, drive continuous improvement and support the development of our wider Information Security Strategy.

What you will be doing

• Lead the continuous improvement and maintenance of the Information Security Management System and ISO 27001 compliance across the Vitality UK Group
• Manage information security risks in line with the Enterprise Risk Framework, ensuring appropriate controls, ownership and reporting are in place
• Deliver strategic information security initiatives and projects aligned with the wider Information Security Strategy
• Provide authoritative guidance on regulatory requirements, data protection and security frameworks including ISO 27001, NIST, PCI DSS and GDPR
• Oversee security governance across projects, procurement and development activity, ensuring risks are addressed throughout the SDLC and DPIA process
• Maintain information security policies, standards, procedures and guidance, ensuring they remain effective and aligned with emerging requirements
• Develop and deliver planned compliance reviews, track identified gaps and ensure agreed remediation activity is completed
• Chair security committees, produce governance and risk reporting for senior stakeholders and represent Vitality at relevant external forums
• Lead and support the Information Security Analyst while building strong relationships across the business to strengthen security awareness and accountability

What do you need to thrive?

• Extensive experience working in information security, with strong knowledge of governance, risk management and regulatory compliance
• Professional security qualifications or certifications such as CISSP, CISM, CISA, an MSc or an equivalent recognised qualification
• Proven experience managing ISO 27001 and other security governance frameworks such as NIST or PCI DSS
• Strong understanding of data protection and regulatory requirements including GDPR, FCA, ICO and PRA expectations
• Experience assessing and managing supplier security risks
• Experience supporting projects throughout the SDLC, including working within Agile delivery environments
• The ability to translate complex technical and regulatory requirements for non-technical stakeholders and senior decision-makers
• Strong policy, standards, governance reporting and project documentation experience

So, whats in it for you?

• Bonus Schemes A bonus that regularly rewards you for your performance
• A pension of up to 12% We will match your contributions up to 6% of your salary
• Our award-winning Vitality health insurance With its own set of rewards and benefits
• Life Assurance Four times annual salary

These are just some of the many perks that we offer! To view the extensive range of benefits we offer, please visit our careers page.Fantastic Benefits. Exciting rewards. Great career opportunities!
If you are successfulin your application and join us at Vitality, this is our promise to you, we will:

• Help you to be the healthiest youve ever been
• Create an environment that embraces you as you are and enables you to be your best self
• Give you flexibility on how, where and when you work
• Help you advance your career by playing you to your strengths
• Give you a voice to help our business grow and make Vitality a great place to be
• Give you the space to try, fail and learn
• Provide a healthy balance of challenge and support
• Recognise and reward you with a competitive salary and amazing benefits
• Be there for you when you need us
• Provide opportunities for you to be a force for good in society

We commit to all these things because we want you to feel that you belong, and are supported to be happy and healthy.

About The Company
Were incredibly proud to be recognised for the culture we've created recently being named one of Glassdoors Best Places to Work 2026, and in 2024 we were delighted to be awarded Top 10 Places to Work in the Sunday Times Awards.

Vitality is a multi-award-winning UK insurance brand, here to make the world a healthier, happier place.

Weve been a purpose and values-driven business from day 1- long before it became fashionable. Our core purpose is to make people healthier and enhance protect their lives. Vitality pioneered shared-value insurance. We incentivise people to live healthier longer lives they benefit, our business benefits, and society benefits. Were successful because we attract, develop, and retain the best people and because we care.

Plus, you get to join our 1.7+ million members with access to our unique health insurance and healthy living programme. Just to make sure you know our products inside and out.

Ready to find out if were the right fit for you? We cant wait.

Diversity & Inclusion
At Vitality, were committed to diversity and inclusion because its good for our employees, for our business, and for society. We welcome applications from individuals of all backgrounds, experiences, and perspectives.
Vitalitys approach to sustainability
Vitality is a business that drives positive change. We reward people for making and sustaining healthier choices. But healthy people also need a healthy environment. To learn more please visit our Careers page. #LI-Hybrid
If we are fortunate in receiving a high volume of quality applications we may need to close this vacancy early. If you are interested, please submit your application as soon as possible.

TPBN1_UKTJ