Information Security Officer R58724

Information Security Officer R58724Department: ITEmployment Type: Permanent - Full TimeLocation: Milton KeynesCompensation: £50,000 - £60,000 / yearDescriptionHere's what you need to know about KineticAt Kinetic, we’re redefining operational excellence in higher education, conferencing, and events. As the leading provider of software solutions for student accommodation, event management, catering, and residential services, we help institutions streamline operations, elevate customer experiences, and unlock their full potential.With over 25 years of experience and trusted by more than 350 institutions worldwide, our software empowers universities and venues to run smarter, faster, and more collaboratively. From bustling campuses to dynamic corporate environments, our technology adapts to the rhythm of each organisation — helping them thrive in a fast-changing world.But we’re more than just software. We’re a team of passionate problem-solvers, innovators, and collaborators who care deeply about our customers and each other. Our culture is built on empowerment, community, and continuous growth. We believe in giving people the tools, support, and freedom to do their best work — and have fun while doing it.Joining Kinetic means being part of a purpose-driven business where your ideas matter, your development is supported, and your impact is real. If you’re ready to help shape the future of operational technology in education and events, we’d love to meet you.What will I be bringing to life in this role?We're seeking an experienced Information Security Officer to lead security strategy, operations, and compliance. This is a hands-on role combining strategic security architecture with operational security management and regulatory compliance oversight. The successful candidate will define security standards across our product portfolio, manage security environments, and serve as our central point for ISO27001, PCI/DSS, and GDPR compliance while supporting commercial teams with tender responses and client security assurance.Core ResponsibilitiesStrategic (30%)Define technical security architecture and standards across multi-cloud SaaS platformsEmbed security into product development lifecycle and roadmap planningConduct threat modeling and risk assessments for new features and system changesEvaluate and recommend security technologies and toolsOperational (40%)Manage security environments across Azure and AWS infrastructureCoordinate security incident response and vulnerability remediationOversee security monitoring, alerting, and detection capabilitiesManage vulnerability assessment and penetration testing programsMaintain identity and access management controlsCompliance & Assurance (30%)Maintain ISO27001 certification and manage audit cyclesEnsure PCI/DSS compliance for payment processing systemsManage GDPR compliance across all products and operationsComplete HECVAT and security questionnaires for higher education tendersSupport sales and customer success with security documentation and evidenceAct as primary security contact for customers and prospectsWhat will I need to hit the ground running?Essential RequirementsSubstantial information security experience in SaaS/cloud software environment (ISV or B2B software preferred)Proven track record managing ISO27001 certification and compliancePractical GDPR implementation experience in software productsPCI/DSS compliance experience with payment processing systemsStrong understanding of cloud security (Azure and/or AWS)Application security and secure development lifecycle knowledgeSecurity incident management and cross-functional response coordinationExcellent communication skills - able to translate technical security for commercial and executive audiencesExperience supporting tender responses and client security assurancePreferred/Nice-to-HaveProfessional certifications: CISSP, CISM, CISA, or equivalentHigher education sector experienceMulti-tenant SaaS architecture security experienceDevSecOps and CI/CD security integration knowledgeSecurity frameworks: NIST, CIS Controls, OWASPMulti-jurisdictional data protection knowledgeEnterprise sales cycle support experienceKey AttributesStrategic thinker who can balance security with business needsPragmatic approach to security implementationDetail-oriented with strong organizational skillsCollaborative and able to influence across teamsProactive in identifying risks and improvement opportunitiesComfortable in fast-paced, dynamic environmentWhat extras will make me thrive?At Kinetic, we believe work should come with rewards that make a real difference. Here’s just a taste of what you can expect when you join us:25 days holiday (plus bank holidays) - with extra days the longer you’re with usTwo paid wellbeing days each year, with a budget to enjoy some time out with someone important to youEnhanced pension contributions to support your futureTwo paid days a year to give back through volunteering, charity work, or sustainability projects with our Green TeamSalary sacrifice schemes for electric vehicles and cycle-to-work24/7 access to our Employee Assistance Programme for confidential advice and supportA full annual health check to keep you at your bestA flexible benefits platform - from life assurance and learning opportunities to retail discounts and cinema ticketsA genuine people-first culture where your growth and wellbeing come firstPerformance-related bonus scheme to reward your contributionRegular socials - from team get-togethers to all-company celebrations, with each department owning a budget for their eventsThe opportunity to attend group conferences, away days and learning forums both in the UK and abroad - network with other talentWe’ve created a welcoming office environment, with well-stocked kitchens offering free breakfast, fresh fruit, hot and cold drinks, and a range of tuck shop goodies to keep you fuelled throughout the day.Kinetic is an equal opportunity employer, fostering diversity and committed to creating an inclusive environment for all employees. #J-18808-Ljbffr