Information Security Officer

Working in our fast paced, successful IT team in our London/Cardiff/Manchester office there has never been a better time to join Pepper Money, a specialist mortgage lender backed by a global financial institution offering first and second charge loans.

We really do believe that it’s our people who are our main competitive advantage – the ‘thing’ that sets us apart from our competitors.

Our passion is to ‘Help People Succeed’. This is at the heart of everything we do and includes our valued customers, intermediary brokers and partners as well as all of our fantastic colleagues.

What you will be doing 

As an Information Security Officer, you’ll help protect the organisation’s critical information assets, ensuring risks are identified, monitored, and effectively managed. You’ll play a key role in incident response, policy development, and maintaining compliance across a regulated environment.

Key responsibilities include:

• Conducting information security risk assessments and supporting remediation across internal systems and third‑party partners.
• Assessing third‑party suppliers for security risks and contributing to due‑diligence processes.
• Assisting Director of IT Ops and CIO in managing risks, working with 2 Line Risk functions, reports, metrics, and dashboards for management oversight.
• Helping maintain and embed security documentation including the IT risk register, data asset register, and audit evidence, with a view to preparing for ISO27001 in future.
• Developing Phishing simulation and platform-based awareness training across the organisation.
• Preparing security reports, metrics, and dashboards for management oversight.

What we are looking for

We’re looking for someone experienced in information security with a proven track record, who brings strong analytical skills, clear communication, and the ability to operate confidently within a regulated environment. This role is uniquely placed within Operational First line IT, with the ability to recommend and execute Technical and Operational changes within the management line.

This is an ideal role for someone who wants more a engaged “hands on” approach and naturally wants to build and make positive change. You’ll be proactive, organised, and committed to promoting good security practice, but you will also gain support from a management team who are Security engaged practitioners, and will help to develop your security career.

You will bring:

• Experience in information security, including risk assessment, vulnerability scanning, and incident response within a regulated (ideally financial services) environment.
• Desirable and relevant qualifications CISA, CISM, CISSP, GIAC, SSCP, Lead Auditor, CISMP, CAP.
• Knowledge of UK regulatory requirements such as FCA and GDPR, plus familiarity with frameworks like ISO 27001 or NIST (desirable).
• Knowledge of 3rd Party Management,
• Strong communication and documentation skills, with the ability to explain security topics to non‑technical colleagues.
• Awareness of cloud security (Azure/M365), identity management, and data asset management (advantageous).

Some of the benefits we provide are:

• Competitive salaries and bonus schemes
• Hybrid home/office working arrangements
• Regular training and opportunities to learn and grow
• Holiday leave plus bank holidays
• Medical insurance cover
• Life insurance
• Health and wellbeing support

In return for your commitment, you’ll have the chance to develop your career in a dynamic environment, working alongside top talent and an exceptional leadership team. If you want to be involved in our exciting expansion plans and have the chance to really shape and influence the way the business grows, then we’d love to hear from you.

We also want our people to feel a sense of belonging at Pepper Money. We are committed to meeting our Diversity, Equality and Inclusion charter, further information can be found on the Careers section on our website.