Information Security Officer -

About the Role

We're looking for an Information Security Officer to help drive and coordinate Nucleo's information security,governanceand compliance activities.This is a high-impact role that works closely with the COO, Information Security Management Forum (ISMF), IT Manager and business stakeholders to maintain and continually improve our Information Security Management System (ISMS), support ISO 27001 certification, and strengthen our overall security posture.The role is ideally suited to someone who enjoys working across teams, influencing positive change, and balancing security,complianceand businessobjectivesin a practical way.

What You'll Do

• Coordinate and support Nucleo's ISO 27001 programme, including certification and surveillance audits.
• Helpmaintainand continuously improve the ISMS.
• Coordinate audits, compliancereviewsand control monitoring.
• Coordinate review of, and support, policies, standards, and procedures.
• Embed security and compliance across the business.
• Support incident coordination, risk management, security awareness, supplierassuranceand reporting.
• Contribute to bids,tendersand customer assurance activities.

What Success Looks Like

• Influences and collaborates effectively across teams.
• Takes a practical approach to security and risk.
• Communicates clearly with stakeholders.
• Demonstratesorganisation,initiativeand continuous improvement.

Why This Role?

An opportunity to shape Nucleo's security and compliance capability, work closely with seniorleadershipand support the company's continued growth. We encourage applications from employees who may not meet every requirement but candemonstratestrong transferable skills and interest in the area.

Skills & Experience - Essential

• Experience in information security, governance,complianceor risk.
• Knowledge of ISO 27001 and ISMS frameworks.
• Strong stakeholder management and communication skills.
• Experience supporting audits and compliance activities.
• Understanding of GDPR and information security principles

Skills & Experience - Desirable

• Cyber Essentials, NIS2 or similar frameworks.
• GDPR compliance experience.
• Customer assurance questionnaire experience.
• Relevant security,auditor data protection certifications.

Nucleo standard company benefits