Information Security Officer

JOB TITLE
- Information Security Officer LOCATION
- Chorley DEPARTMENT
- Corporate Overhead POSITION
- Staff CLEARANCE - SC Working at NSG

NSG Environmental Ltd has been delivering work programmes in the nuclear industry for over 40 years. Traditionally in the areas of decommissioning and waste management, NSG now has a broad customer base and provides a wide spectrum of services across the nuclear project lifecycle, ranging from expert consultancy support, R&D and engineering design to rekit and refurbishment, site installation services and high-hazard physical decommissioning works, amongst others.

This work is delivered at NSG's own offices and purpose-built facilities and nuclear sites across the UK. The delivery and management of these projects and programmes of work is carried out by a skilled workforce composed of both white-collar and blue-collar personnel in technical, administrative, and physical roles.

Our core values of Passion, Integrity, Challenge and Collaboration drive performance and ensure we add significant value. If joining us as a member of staff, we will support your professional development in an exciting and challenging work environment that will enable you to use, develop and hone your technical expertise in a supportive and collaborative working environment.

The Information Security Officer supports the Information Security Manager in implementing, operating, maintaining and continually improving the company's information security, cyber security, data protection and protective security arrangements.

The role carries out day-to-day security assurance, risk, compliance, incident, awareness and records-management activities. It helps protect information assets, systems, personnel and client information against unauthorised access, disclosure, loss, alteration or misuse, while supporting compliance with legal, regulatory and contractual requirements.

• Support the Information Security Manager in creating, reviewing, implementing and maintaining information security policies, standards, procedures and guidance.
• Maintain controlled security records, registers, evidence and action logs, ensuring information is accurate, current and appropriately protected.
• Support the maintenance of information risk registers by recording risks, controls, owners, actions, review dates and status updates.
• Assist with information asset identification, classification, ownership and handling requirements, working with Information Asset Owners where required.
• Monitor assigned actions arising from audits, assessments, incidents and management reviews, and elevate overdue or unresolved matters.

• Coordinate and support internal security assurance activities, audits, control checks, vulnerability assessments and supplier or client information requests.
• Collect, organise and retain objective evidence demonstrating compliance with company policies and applicable legal, regulatory and contractual requirements.
• Support tender, pre-qualification and supplier-assurance submissions relating to information security, cyber security and data protection.
• Identify potential non-conformities, control weaknesses and emerging risks, and report them promptly to the Information Security Manager.
• Support business continuity, disaster recovery and security exercise planning, testing, record keeping and follow-up actions.

• Receive, record, triage and promptly elevate suspected or actual information security, cyber security and data protection incidents in accordance with company procedures.
• Assist investigations by preserving records and evidence, documenting timelines, coordinating actions and maintaining incident logs.
• Suppor…