> Markdown version of [/jobs/ext/4159167-information-security-specialist-hybrid](https://www.wearedevelopers.com/jobs/ext/4159167-information-security-specialist-hybrid). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Information Security Specialist (Hybrid)

- **Company:** Local Pensions Partnership
- **Location:** Preston, UK
- **Salary:** £45,000.0 - £50,000.0
- **Contract:** Permanent contract
- **Skills:** Cloud Computing, Cloud Computing Security, Cyber Security, Disaster Recovery, Identity and Access Management, Information Security Management, Network Security, Microsoft Security Essentials, Software Vulnerability Management, Data Logging, Cybercrime
- **Published:** October 31, 2026
- **Apply:** https://find.jobs/jobs-near-me/apply/ats-redirect/?id=3042539102-2

## About the Role

Substantial practical experience in information security governance, security risk management, security assurance or a comparable specialist role.

 - Demonstrable experience of leading information security risk assessments or assurance reviews and presenting clear findings and recommendations.
 - Experience of assessing technical and organisational security controls, supporting or leading security incidents, and undertaking third-party security due diligence.
 - Strong knowledge of information security governance, risk management and assurance principles, with a good understanding of cyber threats, vulnerabilities and common technology risks.
 - An understanding of identity and access management, logging and monitoring, vulnerability management, encryption, network security, cloud risk and secure configuration.
 - The ability to evaluate conflicting or incomplete evidence, reach a reasoned conclusion and translate technical issues into clear business risks.
 - Confidence to challenge technical and senior stakeholders, alongside high standards of integrity, discretion, evidence management and professional judgement.

Nice to have:

 - Experience of recognised standards or frameworks such as ISO/IEC 27001, the NCSC Cyber Assessment Framework or equivalent.
 - Experience within pensions administration, financial services, local government or another regulated environment.
 - Experience of cloud security, Microsoft security environments, security testing, audit liaison or cyber exercise coordination.

Qualifications and professional development:

 - A relevant information or cyber security qualification, or progress towards one, would be desirable.
 - Membership of a relevant professional body would be desirable.

Working with and upholding our values:

 - Working together
 - Committed to excellence
 - Doing the right thing
 - Forward-thinking

## Description

Join LPPA as our Information Security Specialist and take a leading role in strengthening how we govern, assess and assure information security risk across the organisation. Working within Risk & Governance, you will provide specialist advice and constructive challenge on security risks, controls, third-party assurance, incidents and organisational resilience. You will work closely with Technology, project teams and business owners, translating complex technical information into clear business risks and assurance for senior leaders and governance forums. You will also take responsibility for LPPA's ISO 27001 reaccreditation process.

This is a fantastic opportunity to join our fast-paced, collaborative and member-focused business. You will be part of a friendly, welcoming and sociable work culture, with opportunities for continuous personal and professional development and support to reach your full potential., Lead the development and continuous improvement of LPPA's information security management framework, policies, standards and supporting procedures.

 - Maintain LPPA's information security risk profile, ensuring risks are recorded, assessed, owned, monitored and reported through the appropriate governance arrangements.
 - Provide authoritative advice and constructive challenge to Technology, project teams and business owners on security risks and their treatment.
 - Lead the information security assurance programme, including control reviews, evidence gathering, thematic assessments and remediation monitoring.
 - Assess the design and operation of key information security controls, identify weaknesses and recommend proportionate improvements.
 - Lead supplier and third-party security due diligence, reviewing security evidence, certifications, contractual controls, risk assessments and remediation activity.
 - Lead the governance and oversight of information security incidents, including assessment, documentation, escalation, investigation and post-incident review.
 - Produce information security reports, dashboards and assurance updates for senior management, governance committees and Boards.
 - Support business continuity, disaster recovery and operational resilience activity, including cyber incident response and recovery exercises.
 - Coordinate with external security advisers, testing providers, auditors and assurance partners.