-
The Information Security Officer is responsible for supporting the effective management of information and cyber security across the business.
The role provides oversight, assurance and guidance relating to information assets, technology platforms, cloud services, third-party providers and business processes to preserve the confidentiality, integrity, availability and resilience of corporate and client information in line with legal, regulatory and business requirements.
Core Responsibilities
Support the Information Security Manager and business stakeholders to understand security objectives, regulatory requirements and information security risks, providing appropriate security advice, guidance and solutions that align with business needs.
Assist in the development, implementation and continual improvement of the Information Security Management System, ensuring alignment with corporate objectives, industry standards and regulatory requirements.
Support the identification, assessment, treatment and reporting of information security, cyber security, technology and third-party risks within the corporate risk management framework.
Assist in maintaining compliance with applicable regulatory, legal and contractual requirements, including FCA requirements, UK GDPR, Data Protection legislation and relevant security standards.
Conduct and support information security risk assessments, control reviews and assurance activities across business functions, technology platforms, cloud services and third-party suppliers.
Support the implementation and monitoring of security controls aligned to recognised frameworks including ISO 27001, NIST Cybersecurity Framework, CIS Controls and other applicable industry standards.
Provide security guidance and consultancy to projects, technology initiatives, cloud implementations and business change programmes to ensure security requirements are considered by design.
Assist in overseeing third-party and supplier security assurance activities, including due diligence assessments, security reviews and ongoing monitoring of supplier risk.
Support internal and external audits, regulatory reviews and certification activities, ensuring audit findings, recommendations and remedial actions are effectively managed and tracked to completion.
Assist in the development, implementation and review of information security policies, standards, procedures and supporting documentation to ensure they remain current, effective and aligned with organisational requirements.
Support security awareness, education and training programmes to promote a positive security culture and ensure colleagues understand their information security responsibilities.
Assist in the monitoring and reporting of security metrics, key risk indicators, control effectiveness and compliance activities, providing management with meaningful security and risk information.
Skills/Experience
Track record of two years or more implementing information security practices within an organisation.
Good background in information management, with clear understanding of the challenges of information and IT security.
An excellent knowledge of relevant information security standards and practices.
Solid technical knowledge and experience of security technologies (e.g.
endpoint protection, mobile security, data protection, cloud security) and cyber security capabilities (SIEM, SOC, CERT, vulnerability management, threat intelligence).
Strong knowledge of the main information security standards and frameworks (in particular ISO 27001, Cyber Essentials Plus).
A good understanding of, and experience in, implementing information security within cloud-based environments.
Experience and skills in the project management of corporate information security projects.
Demonstrated leadership abilities that energise multi-discipline work teams to respond to business needs.
Excellent oral and written communication skills, with the ability to present and explain information security in a way that establishes rapport, persuades others and gains understanding across the organisation.
Qualifications
Industry certifications in information security.
Degree in Information Systems, information security or a closely related subject.
Certifications in information security (e.g.
CISSP, CISM, ISO 27001, ISO 22301) would be a plus.
Core-Asset Consulting is an equal opportunities recruiter and we welcome applications from everyone irrespective of age, disability, gender, gender identity or expression, race, colour, ethnic or national origin, sexual orientation, religion or belief, marital/civil partner status or pregnancy.
To apply for this vacancy applicants must be eligible to work in the UK in accordance with the Immigration, Asylum and Nationality Act 2006.
At Core-Asset, we're committed to protecting and respecting your privacy.
Our privacy statement explains when and why we collect personal information about people who engage with our services, how we use it, the conditions under which we may disclose it to others, and how we keep it secure.
We may change this policy from time to time, so please check this policy occasionally to ensure that you're happy with any changes.
By engaging with us (either by applying for a job we're advertising, registering through our website, or getting in touch with our business) you're agreeing to be bound by this policy.
Core-Asset Consulting is committed to protecting the privacy of our candidates, clients and website users.
For further information, please refer to our full Privacy Statement available on our website http://www.core-asset.co.uk/about-core-asset/privacy-statement
Core-Asset Consulting offers specialist recruitment services to asset management, accounting & finance, asset servicing, legal and the wider financial services sector in Scotland. ....Read more...
Type: Permanent Location: Newcastle upon Tyne, England
Start: ASAP
Posted: 2026-10-09 17:11:28
-
This role translates our client's security strategy into effective day-to-day assurance and risk management.
You will assess cyber risk, review technology and AI solutions, lead security investigations and control assurance, coordinate testing and regulatory activity, and provide expert security advice to Technology and the wider business.
You'll also represent the security function on key governance and working groups
Essential Skills/Experience:
Strong practical experience of cyber risk assessment, security assurance and control evaluation
Recognised cyber security qualification such as CISSP, CISM, CRISC or equivalent
Experience reviewing security designs for technology change, software development and third-party solutions
Strong practical experience of the Microsoft 365 security stack, including Entra, Defender and Purview
Strong incident-triage, threat-hunting and investigation skills
Experience designing and interpreting penetration tests, attack simulations and security-control assurance
Good understanding of identity, endpoint, data-protection, mobile-device, email/web and cloud security controls
Experience of third-party and AI security due diligence, including data protection and supplier assurance
Working knowledge of regulatory frameworks, security standards, risk registers and audit processes
Strong communication, training and stakeholder-management skills across technical and non-technical audiences
Core Responsibilities:
Assess cyber risks, control strengths, security exceptions, threat-intelligence findings and attack paths
Review security designs for Technology, departmental and citizen-developed solutions before production use
Triage security incidents and lead threat hunting and investigations into data-protection, information-protection and insider-risk alerts
Design penetration tests and attack simulations, assess findings and drive remediation of material weaknesses
Review the effectiveness of endpoint, encryption, identity, conditional-access, mobile-device and web/email security controls
Perform security due diligence on third parties and AI providers, including data-use, model-training and data-residency controls
Produce the Cyber RCSA and undertake cyber-insurance, internal-audit and external-audit casework
Conduct regulatory and standards gap analyses and communicate relevant requirements across the firm
Design access-review processes, security management information and assurance reporting
Design and deliver phishing simulations, bespoke security training and targeted awareness activity
Lead monthly technical reviews with the SOC and challenge service quality and control effectiveness
Advise Technology and business teams on security risks and escalate material issues to the Head of Enterprise Security
Core-Asset Consulting is an equal opportunities recruiter and we welcome applications from everyone irrespective of age, disability, gender, gender identity or expression, race, colour, ethnic or national origin, sexual orientation, religion or belief, marital/civil partner status or pregnancy.
To apply for this vacancy applicants must be eligible to work in the UK in accordance with the Immigration, Asylum and Nationality Act 2006.
At Core-Asset, we're committed to protecting and respecting your privacy.
Our privacy statement explains when and why we collect personal information about people who engage with our services, how we use it, the conditions under which we may disclose it to others, and how we keep it secure.
We may change this policy from time to time, so please check this policy occasionally to ensure that you're happy with any changes.
By engaging with us (either by applying for a job we're advertising, registering through our website, or getting in touch with our business) you're agreeing to be bound by this policy.
Core-Asset Consulting is committed to protecting the privacy of our candidates, clients and website users.
For further information, please refer to our full Privacy Statement available on our website http://www.core-asset.co.uk/about-core-asset/privacy-statement
Core-Asset Consulting offers specialist recruitment services to asset management, accounting & finance, asset servicing, legal and the wider financial services sector in Scotland. ....Read more...
Type: Permanent Location: Edinburgh, Scotland
Start: ASAP
Posted: 2026-09-29 09:32:30
-
Our client, a specialist investment management firm based in Edinburgh, is looking to appoint an Enterprise Security Risk Manager to join their team.
This role translates our client's security strategy into effective day-to-day assurance and risk management.
You will assess cyber risk, review technology and AI solutions, lead security investigations and control assurance, coordinate testing and regulatory activity, and provide expert security advice to Technology and the wider business.
You'll also represent the security function on key governance forums, including the Information Security Working Group, Third Party Oversight Working Group and Business Continuity Working Group.
Our client places a strong emphasis on client-first thinking, collaboration and integrity across the business.
A recognised cyber security qualification such as CISSP, CISM, CRISC or equivalent is desirable for this role.
Skills/Experience:
Strong practical experience of cyber risk assessment, security assurance and control evaluation
Experience reviewing security designs for technology change, software development and third-party solutions
Strong practical experience of the Microsoft 365 security stack, including Entra, Defender and Purview
Strong incident-triage, threat-hunting and investigation skills
Experience designing and interpreting penetration tests, attack simulations and security-control assurance
Good understanding of identity, endpoint, data-protection, mobile-device, email/web and cloud security controls
Experience of third-party and AI security due diligence, including data protection and supplier assurance
Working knowledge of regulatory frameworks, security standards, risk registers and audit processes
Strong communication, training and stakeholder-management skills across technical and non-technical audiences
Core Responsibilities:
Assess cyber risks, control strengths, security exceptions, threat-intelligence findings and attack paths
Review security designs for Technology, departmental and citizen-developed solutions before production use
Triage security incidents and lead threat hunting and investigations into data-protection, information-protection and insider-risk alerts
Design penetration tests and attack simulations, assess findings and drive remediation of material weaknesses
Review the effectiveness of endpoint, encryption, identity, conditional-access, mobile-device and web/email security controls
Perform security due diligence on third parties and AI providers, including data-use, model-training and data-residency controls
Produce the Cyber RCSA and undertake cyber-insurance, internal-audit and external-audit casework
Conduct regulatory and standards gap analyses and communicate relevant requirements across the firm
Design access-review processes, security management information and assurance reporting
Design and deliver phishing simulations, bespoke security training and targeted awareness activity
Lead monthly technical reviews with the SOC and challenge service quality and control effectiveness
Advise Technology and business teams on security risks and escalate material issues to the Head of Enterprise Security
Core-Asset Consulting is an equal opportunities recruiter and we welcome applications from everyone irrespective of age, disability, gender, gender identity or expression, race, colour, ethnic or national origin, sexual orientation, religion or belief, marital/civil partner status or pregnancy.
To apply for this vacancy applicants must be eligible to work in the UK in accordance with the Immigration, Asylum and Nationality Act 2006.
At Core-Asset, we're committed to protecting and respecting your privacy.
Our privacy statement explains when and why we collect personal information about people who engage with our services, how we use it, the conditions under which we may disclose it to others, and how we keep it secure.
We may change this policy from time to time, so please check this policy occasionally to ensure that you're happy with any changes.
By engaging with us (either by applying for a job we're advertising, registering through our website, or getting in touch with our business) you're agreeing to be bound by this policy.
Core-Asset Consulting is committed to protecting the privacy of our candidates, clients and website users.
For further information, please refer to our full Privacy Statement available on our website http://www.core-asset.co.uk/about-core-asset/privacy-statement
Core-Asset Consulting offers specialist recruitment services to asset management, accounting & finance, asset servicing, legal and the wider financial services sector in Scotland. ....Read more...
Type: Permanent Location: Edinburgh, Scotland
Start: ASAP
Posted: 2026-09-25 16:16:47
-
Administrator
Dover £27,000 - £30,000 Basic + Job Security + Family Business + Pension + Stability + Immediate Start
If you're looking for a stable and long-term role within a financially secure, family-run organisation, this Administrator opportunity is perfect for you.
Join a well-established main dealer that has been trading successfully for over 40 years.
This role offers job security, great morale, and the chance to work as part of a tight-knit team within a business that truly values its people, many of whom have been with the company for 20 years or more.
This is your chance to join a highly credibl family-owned company with a turnover exceeding £140 million.
Your Role as a Claims Administrator will include:
Managing warranty, R&M (repair and maintenance), and Mobile24 claims for vehicles
Communicating with customers, fleet operators, and internal departments
Working closely with a team of six in the front office
The Successful Claims Administrator will have:
Experience working in an administrative role within the motor industry (cars, vans, or trucks)
Excellent communication and organisational skills
Strong IT and data entry capability
Claims Administrator, Workshop Claims Administrator, Administration, Motor Industry, Automotive Administration, Warranty Administrator, Warranty Claims, Fleet Administration, MAN Trucks, Vehicle Administration, ....Read more...
Type: Permanent Location: Dover, England
Salary / Rate: £27000.00 - £30000.00 per annum
Posted: 2026-09-21 23:35:04
