Information Security Officer

About the role

Super is establishing a new Information Security Officer position within its Cybersecurity team. The role focuses on governance and compliance, overseeing company‑wide security policies, training, and ensuring all teams meet regulatory obligations.

Key responsibilities

• Own and maintain the information security policy framework, aligning it with ISO 27001, GDPR and business needs.
• Drive the security compliance strategy, operate the GRC platform and communicate policies across the organisation.
• Design and deliver tailored security awareness and training programmes for different teams.
• Monitor compliance adoption, validate steps, and manage escalations for gaps.
• Track policy exceptions, report remediation progress and own the PII compliance plan.
• Coordinate with external auditors, manage evidence collection and provide regular compliance reporting to leadership, the Board and the Risk Committee.

Required profile

• Proven experience in information security governance, risk and compliance (GRC) within a regulated, multi‑market environment.
• Deep knowledge of ISO 27001, GDPR and related data‑protection standards.
• Track record of owning security policy frameworks and running awareness programmes.
• Hands‑on experience with a GRC platform and driving compliance across many teams.
• Excellent stakeholder‑management and communication skills, able to influence without direct authority.
• Experience reporting to senior leadership, boards or risk committees.

Required skills

• ISO 27001
• GDPR
• GRC platform operation