Assess systems and processes to ensure appropriate security controls are in place
Provide expert security advice to IT teams and system owners, based on best practices
Perform risk assessments for new suppliers, software, systems, and technologies
Conduct annual security reviews and risk assessments of IT suppliers
Coordinate and oversee annual penetration testing activities
Identify, analyse, and mitigate network and system vulnerabilities
Monitor environments for security incidents, intrusions, and suspicious activity
Investigate security alerts and support incident response activities
Identify gaps in security controls (e.g. Active Directory, Azure, AWS environments)
Maintain and continuously improve the Information Security Management System (ISMS)
Maintain the information security risk register and support internal and external audits
Research emerging cyber security threats and define mitigation strategies
Develop, test, and maintain disaster recovery and business continuity plans
Support the creation and delivery of cyber security awareness training for colleagues
Review and refine security policies, procedures, and controls to ensure ongoing resilience
Oversee the development, implementation, and maintenance of information security policies for data at rest and in transit.

Proven experience in a similar Information Security Officer or security governance role
Strong practical experience with information security frameworks and methodologies
A recognized information security certification (e.g. CISSP, CISM, CEH or similar)
Solid knowledge of ISO 27001 and Cyber Essentials Plus
Experience securing cloud‑based environments such as Azure and/or AWS
Good understanding of GDPR principles and practices
A structured, analytical approach with a strong sense of ownership and accountability
The ability to clearly explain security risks and mitigation measures to different audiences
Excellent written and verbal communication skills
Experience in a GxP‑regulated environment is a strong plus.

A competitive salary with a tailor-made benefits package, including: option to buy extra leave, travel allowance and a bonus plan
Flexible working hours and 30 days of paid holiday per year
A dynamic, international work environment with career growth opportunities
Access to Ardena Academy, our internal learning platform for professional development
A chance to contribute to groundbreaking drug development projects that make a real impact

Information Security Officer

Key skills