Naimuri - Information Security Officer

Job Title:

Naimuri - Information Security Officer

Job Location:

Salford Quays, Manchster Job Type:
Permanent, Fulltime - onsite

Job :
20594

The Mission:

At Naimuri, we provide the tech that protects. As our Information Security Officer, you will sit at the heart of our mission, bridging the gap between high-level compliance and hands-on technical security. You won’t just be writing policies; you’ll be ensuring they work in the real world. Reporting directly to the Head of Security, you will play a pivotal role in maintaining our reputation as a trusted partner to our customers.

The Balance:
What You’ll Be Doing:
1. Governance, Risk & Compliance (The "Handoff")Framework Management:
Manage and evolve our security management systems, ensuring we remain aligned with security frameworks & standards, e.g. Cyber Essentials Plus & ISO
27001.Policy Evolution:
Work with the Head of Security to develop and implement security policies that balance the need for security with the agility needed for a modern tech company.

Security Auditing:
Conduct internal audits and coordinate with external assessors to ensure our security posture is ironclad.

Third-Party Risk:
Assess the security of our supply chain and software vendors.
2. Technical Security & Operations (The "Hands-on")Collaborative Defence:
Work alongside the internal teams to harden our cloud environments (AWS/Azure) and ensure end-user devices (laptops, mobile) are configured securely.

Vulnerability Management:
Run and remediate vulnerability scans; don’t just report the issues; help figure out how to fix them.

Incident Response:
Be a key part of our incident response team, investigating alerts and refining our "playbooks" for future threats.

Identity & Access:
Manage the lifecycle of software licenses and access controls, ensuring the principle of least privilege is always met.

Who You Are:

The Bridge:
You can talk "tech" within a very technical company but also explain "risk" to a non-technical stakeholder.

Growth Mindset:
You are at a mid-level stage in your career and are hungry to step up. You want a seat at the table where decisions are made.

Agile & Dynamic:
You thrive in fast-paced environments. You’d rather solve a problem than wait for a ticket to be assigned.

Security First:
You have a natural "security mindset" you see the vulnerability in the process before it becomes a problem.

Your Toolkit (Requirements):

Experience:

2-4 years in an Information Security or dual IT/Security role, ideally within a regulated industry or government-adjacent sector.

Technical Knowledge:
Familiarity with cloud platform security (AWS, Azure, or GCP) and MDM solutions for managing corporate devices.

Regulatory Knowledge:
Understanding of UK Data Protection/GDPR and ISO 27001.Certification:
While not mandatory, certifications such as CompTIA Security+, SSCP, or CISM are a significant plus.

Why Naimuri?

People First:
Expect a supportive environment that values your mental health and professional development.

High Impact:
Your work directly supports the safety and security of the UK.Culture: A vibrant Salford-based team with a "work hard, support each other" ethos.

Pay and benefits:

Naimuri pays competitively within the industry based on your role's base location rates. The salary for this position is dependent upon your experience. We assess seniority relative to the team at Naimuri during the interviewing process.

A full time working week is 37.5 hours and you have flexibility over when you give that time. We also offer part-time working, which can be discussed during the recruitment process. We offer hybrid working where you can work from home for part of your working week with time on site being based on the needs of your assigned delivery and agreed Ways of Working for your…