Westcoast Limited
Principal Information Security Officer
Get notified of more jobs like this · No spam, ever
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
The Job Role
You will report to the Director of Cyber Security and will be working to deliver the Architecture and consultancy, Identity and Access Management and Governance, Risk and Compliance activities within the Westcoast Security Model.
The role will involve working in partnership across the group with both stakeholders, technical teams, development functions, and third parties to deliver Secure Development Lifecycle (SDLC) processes and solutions, compliance, and consultancy activities. These activities will need to comply with standards such as ISO27002, Cyber Essential Plus, PCI-DSS, DPA:2018, EU Directives, and PASF, as well as customer-specific requirements, while also aligning with ISO22301 and resiliency requirements. As an experienced practitioner, you will be looking to improve maturity and standards, setting goals and plans with meaningful metrics and KPIs.
As well as working within the PMO on projects, you will work with the Heads of, through the group compliance board, on maintaining external standards, as well as deputizing for the Director of Cyber Security in their absence. As an experienced security lead, you will lead on the security engagements, providing subject matter expertise on requirements, compliance, contracts, controls, resilience, testing, and assurance.
Regular travel to UK-based offices is required in this role. You must be able to achieve Westcoast security vetting.
Your Day-to-Day Responsibilities Will Include:
- Maintaining a security assurance program in support of PMO portfolio
- Developing initiatives on inter-group Security Improvements
- Working with the Technical Design Board on developing security architecture and patterns
- Driving improvement in the SDLC processes
- Maintaining compliance with external security standards and frameworks required by regulators and customers and working in partnership with Compliance, Legal, and Internal Audit functions
- Security assessment and management of Westcoast hosted and cloud infrastructure, networks, endpoints, and applications and data against threat models. Including developing testing and remediation plans with tracking
- Working with system owners to drive the implementation of identity good practice and in particular single sign-on and federated services
- Security Reporting providing management reporting and real-time dashboards, to provide the security team business and management assurance of the compliance of projects and IT security controls
- Work with Security Operations and Engineering teams on control effectiveness
- Where requested on contracts - Provide end-to-end assurance of compliance with existing Information Security policies and standards (attend meetings with customers etc.).
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Is this the role for you?
We are looking for someone who can shape change and has an experience in GRC, security architecture, consultancy, and identity management. Our ideal candidate will have a focus on improvement, a passion for security, and strong technical skills.
To be successful in this role, you will have some of the following skills and experience and the desire to develop in other areas:
- Minimum of 5 years’ experience in a relevant security position
- A security professional qualification such as CISSP, CISM, CCSP, CISA, ISO27001 Lead Implementor/Auditor, CEH, or equivalent
- Or an equivalent recognized Information Security discipline Degree: NCSC-certified degrees - NCSC.GOV.UK
- Previous experience and knowledge of security frameworks, i.e., ISO27001, NIST, CIS Controls, and PCI-DSS compliance
- An understanding of HMG security standards (e.g., Security Policy Framework, Cyber Essentials Plus, Cloud security principles etc.)
- Experience of Enterprise Project Management practices as related to information Security
- Experience of working with enterprise-level IT and network teams, systems, and processes
- Experience of working with MSSPs, Pentesters, Redteaming, external SOCs
- Experience of security products, e.g., firewalls, web filtering, anti-virus, etc.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
What’s in It for You?
This is a fantastic opportunity to immerse yourself in the IT industry, build lasting relationships, and grow with a Sunday Times Top Track 100 company.
- Growth Opportunities: We offer training and development opportunities to help you reach your full potential. Whether it’s funded apprenticeships, work-based studies, or professional qualifications, we’ve got you covered.
- Generous Benefits Package: A salary of up to £70,000 depending on experience. Enjoy 25 days of holiday, employee referral bonuses, perks, and discounts. (Theale only – New fully equipped gym available 24/7).
- Wellbeing Support: Access to Westcoast Wellbeing services including mental health counselling, virtual GP services, physiotherapy, life insurance, eye care schemes, and more.
- Community & Connection: Our teams enjoy social and charitable events throughout the year, fostering a strong sense of belonging.
What’s Next?
If you’re ready to join a company that values its people and rewards success, click apply to start the quick application process (5-6 mins).
Please note: Due to the high volume of applications, we may not be able to provide individual feedback for every candidate. If you don’t hear from us within 14 working days, kindly note that we have chosen to pursue other candidates for this opportunity. We appreciate your interest and encourage you to explore future opportunities with us.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Location