Information Security Officer in London

We are Recognise Bank; a modern business bank built to support the UK’s SMEs with tailored lending and savings solutions. Founded in 2017 by experienced business owners, we set out to challenge traditional banking by offering more flexibility, understanding, and practical support to help businesses thrive. Since receiving our banking licence in 2021, we’ve built a loyal customer base and a strong, diverse team that puts people first. Our vision is building stronger futures with bespoke financial solutions. We understand that no two financial needs are the same, which is why we work closely with UK SMEs and individuals to unlock potential others often overlook.

Through smart, flexible lending and savings products, we’re here to build and grow stronger futures for lasting success. Our values shape how we work and grow together:

• Can do, will do: We take ownership, solve problems, and adapt as our customers’ needs evolve.
• Be brilliant: We show up with curiosity and energy, always striving for better.
• Do the right thing: We act with integrity, responsibility, and care in everything we do.
• Make a difference: We focus on impact, helping our customers, colleagues, and communities succeed.

About the role: Sitting in our 2nd Line Function, the Information Security Officer (ISO) plays a pivotal role in helping the bank achieve its growth ambitions in a compliant and secure manner. Working with the Chief Risk Officer and Data Protection Officer, the role holder will ensure the bank has robust and proportionate policies, standards and control frameworks in place. Working with 1st Line colleagues from across the bank, particularly those responsible for Information Security, IT, Operational Resilience and the management, storage and use of data, will provide independent assurance of the efficacy of the control environment and support the delivery of projects and transformational change.

A trusted expert and critical friend, the individual will be responsible for working directly with the bank’s Executive Team and Board to ensure they have a transparent understanding of the bank’s risk posture and be responsible for increasing Information Security awareness, skills and understanding across the bank.

Key Responsibilities:

• Security Governance, Policy & Reporting
• Cyber Security
• Security Awareness & Training
• Data Protection & Privacy
• IT Infrastructure Oversight
• Incident Management & Operational Resilience

Corporate Responsibilities:

• Read and follow all relevant company policies and procedures.
• Adhere to all risk-related responsibilities applicable to your role, as set out in the Risk Management Policy.
• Abide by all compliance and financial crime related policies, procedures and reporting obligations applicable to your role.
• A Material Risk Taker for the bank, you will need to act in accordance with regulatory expectations of a Certified individual.

Required Skills & Experience:

• A minimum of 5 years’ experience in a second line information security, GRC or data protection role within a UK regulated financial services firm.
• Working knowledge of PRA and FCA expectations, UK GDPR, PECR and operational resilience requirements.
• Experience running security awareness programmes, including phishing simulations and e-learning platforms.
• Working knowledge of Microsoft Purview (DLP, Insider Risk management, Communication Compliance) and the wider Microsoft E5 security stack.
• Experience responding to internal and external audits and drafting Board and committee papers.
• Experience of third-party security due diligence and supplier risk assessments.
• Relevant certifications such as CISSP, CISM, CRISC, CIPP/E or ISO 27001 Lead Auditor (desirable).

At Recognise Bank, we're building more than a bank — we’re creating a culture where people feel empowered to make a difference, supported to be brilliant with a can do will do attitude, and trusted to do the right thing. We believe that when our people thrive, so do our customers. That’s why we invest in an environment that reflects our values and supports your growth, flexibility, and wellbeing.

Here’s what you can look forward to:

• Competitive Time Off: Generous annual leave plus bank holidays to rest, recharge, and enjoy life outside of work.
• Work From Anywhere: Up to 6 weeks per year to work remotely from anywhere in the world.
• Learning & Development: Tailored training and support to grow your skills and achieve your professional goals.
• Hybrid Working: To support your work-life balance, we offer a hybrid working model with 3 days in the office and 2 days remote.
• Private Medical Care with Vitality: Comprehensive healthcare coverage to keep you healthy.
• Enhanced Pension Scheme: Helping you plan and save for a secure future.
• Maternity, Paternity & Adoption Pay: Supporting you and your family during important life moments.
• Discretionary Company Bonus: Rewarding your contribution to our shared success.

If you're curious, driven, and ready to be part of something meaningful — where your ideas matter, your growth is supported, and your work makes a real impact — then we’d love to hear from you.