Junior Penetration jobs

Junior Information Security Governance Officer

Remuneration: £35 – 40K per annum dependent upon experience.

Contract Length: 12-month fixed term maternity cover contract.

Hours: Full time – 35 hours a week, Monday to Friday.

Location: Hybrid Working, with a minimum of one day a week in the Head Office located in Harrogate, North Yorkshire.

Candidates must be within reasonable commuting distance of Harrogate.

Who we are: LINK is a not-for-profit company governed by an independent Board and is the UK's largest cash machine network, connecting virtually all the UK’s ATMs and providing communities with access to cash through services such as cashback at retailers’ tills and Banking Hubs. While many consumers are now embracing digital payments, there are still millions of people who rely on cash every day. At LINK, we are passionate about protecting access to cash on the UK’s High Streets and ensuring it is maintained for as long as it is needed through the operation of our well-established Financial Inclusion Programme. LINK is regulated by the Payments Systems Regulator and the Bank of England and have a great track record of delivering results for communities.

What does the role involve?

To support the delivery and continual improvement of the organisation’s Information Security Governance framework. The role will assist in ensuring compliance with internal policies and external standards (including ISO 27001), contribute to risk management activities, and support the ongoing maturity of the Information Security Management System (ISMS).

This is a developmental role designed to build practical experience in information security governance, risk, and compliance within a regulated environment.

• Support the maintenance and continual improvement of the Information Security Management System (ISMS) in line with ISO 2700.
• Assist in the development, review, and communication of security policies, standards, and governance documentation, ensuring they remain accurate, relevant and accessible.
• Help maintain the information security risk register, including recording, updating, and tracking risks under guidance from senior team members.
• Support third-party risk management processes by assisting with supplier security assessments and evidence gathering.
• Provide governance support to incident response and business continuity activities, working alongside more experienced colleagues.
• Monitor the phishing mailbox, investigate reported emails and assist with threat analysis using security tools and external intelligence sources.
• Collaborate with senior stakeholders and team members to develop knowledge of security governance practices and risk management.
• Contribute to team knowledge sharing and actively develop personal capability of information security, risk and compliance.

What will I need to know?

• Minimum of 3 years’ experience in an Information Security or related role.
• Exposure to risk management, incident management, and governance activities.
• Experience working within or alongside an ISO 27001-aligned environment is preferred.
• A successfully completed and certified Information Security apprenticeship (e.g. Cyber Security Technologist, Level 4 or equivalent), or Relevant industry certifications (such as CompTIA Security+, ISO 27001 Foundation/Practitioner, or equivalent).
• Understanding of risk management principles and control frameworks.
• Awareness of information security standards, particularly ISO 27001.
• Basic knowledge of security incident management and threat awareness.Familiarity with data protection and regulatory requirements, ideally within financial services.
• Strong communication and interpersonal skills.
• Ability to work collaboratively across teams.
• Good problem-solving skills and attention to detail.
• Effective time management and organisational ability.
• Gain hands-on experience of working within an ISO 27001-certified environment.
• Develop skills in risk management, governance frameworks, and regulatory compliance.
• Opportunity to build a career pathway into Information Security, Risk, or Compliance roles.

What is in it for me?

You will be joining a not-for-profit business with a lovely working culture, and our employees are at the centre of our focus.

In addition to the base salary, LINK operates a bonus scheme and offers a wide range of employee benefits including group life and income protection, company pension scheme, private medical and dental insurance, hybrid working and learning opportunities. Our Harrogate office has an on-site café, gym, free car parking including electric charging points and bike parking facilities as well.

We will be interviewing as we receive CVs so if you are interested in this role, please apply as soon as possible.

Pay: £35,000.00-£40,000.00 per year

Benefits:

• Company pension
• Free parking
• Health & wellbeing programme
• Life insurance
• On-site parking
• Private medical insurance
• Work from home

Application question(s):

• Do you live within reasonable commuting distance of Harrogate, West Yorkshire?
• Are you able to reliably commute to the office in Harrogate, North Yorkshire a minimum of once per week?

Work authorisation:

• United Kingdom (required)

Work Location: Hybrid remote in Harrogate HG3