Information Security Officer

Recognise Bank

Apply to this job
London hybrid Until 9/1/2026 5+ years exp First posted July 3, 2026 Last posted July 3, 2026
Job description
Hello,
 
We are Recognise Bank; a modern business bank built to support the UK’s SMEs with tailored lending and savings solutions. Founded in 2017 by experienced business owners, we set out to challenge traditional banking by offering more flexibility, understanding, and practical support to help businesses thrive. Since receiving our banking licence in 2021, we’ve built a loyal customer base and a strong, diverse team that puts people first.
 
Our vision is building stronger futures with bespoke financial solutions. We understand that no two financial needs are the same, which is why we work closely with UK SMEs and individuals to unlock potential others often overlook. Through smart, flexible lending and savings products, we’re here to build and grow stronger futures for lasting success.
 
Our values shape how we work and grow together:
💪 Can do, will do: We take ownership, solve problems, and adapt as our customers’ needs evolve.
✨ Be brilliant: We show up with curiosity and energy, always striving for better.
🤝 Do the right thing: We act with integrity, responsibility, and care in everything we do.
💡Make a difference: We focus on impact, helping our customers, colleagues, and communities succeed.
 
About the role
Sitting in our 2nd Line Function, the Information Security Officer (ISO) plays a pivotal role in helping the bank achieve its growth ambitions in a compliant and secure manner. Working with the Chief Risk Officer and Data Protection Officer the role holder will ensure the bank has robust and proportionate policies, standards and control frameworks in place. Working with 1st Line colleagues from across the bank, but particularly those responsible for Information Security, IT, Operational Resilience and the management, storage and use of data, will provide independent assurance of the efficacy of the control environment and support the delivery of projects and transformational change.  A trusted expert and critical friend, the individual will be responsible for working directly with the bank’s Executive Team and Board to ensure they have a transparent understanding of the bank’s risk posture and responsible for increasing Information Security awareness, skills and understanding across the bank.

Key Responsibilities

    • Security Governance, Policy & Reporting  

    • Cyber Security  

    • Security Awareness & Training  

    • Data Loss Prevention & Insider Risk  

    • Data Protection & Privacy  

    • IT Infrastructure Oversight  

    • Incident Management & Operational Resilience  

    • Risk Leadership  

Corporate Responsibilities 

    • Read and follow all relevant company policies and procedures  

    • Adhere to all risk-related responsibilities applicable to your role, as set out in the Risk Management Policy   

    • Abide by all compliance and financial crime related policies, procedures and reporting obligations applicable to your role  

    •  A Material Risk Taker for the bank you will need to act in accordance with regulatory expectations of a Certified individual  

Required Skills & Experience

    • A minimum of 5 years’ experience in a second line information security, GRC or data protection role within a UK regulated financial services firm. 

    • Working knowledge of PRA and FCA expectations, UK GDPR, PECR and operational resilience requirements.  

    • Experience running security awareness programmes, including phishing simulations and e-learning platforms. 

    • Working knowledge of Microsoft Purview 9DLP< Insider Risk management, Communication Compliance) and the wider Microsoft E5 security stack. 

    • Experience responding to internal and external audits and drafting Board and committee papers.  

    • Experience of third-party security due diligence and supplier risk assessments  

    • Relevant certifications such as CISSP, CISM, CRISC, CIPP/E or ISO 27001 Lead Auditor (desirable). 

About this role

Summary

Oversee security governance, policies, awareness, incident response, and compliance in banking.

Job title

Information Security Officer

Experience level

5+ years

Minimum experience

5+ years exp

Industry

financial services

Location requirements

London-based; on-site work allowed.

Salary

Not specified

Management role

No

Skills & keywords

Required skills

second line securityPRA and FCA standardsUK GDPRMicrosoft Purview 9DLPsecurity auditssupplier risk assessments

Preferred skills

CISSPCISMCRISCCIPP/EISO 27001 Lead Auditor

Specializations

cybersecuritydata protectionIT infrastructurerisk management
Locations

Structured locations inferred from the posting.

London, UK

Hybrid City
Related searches