Data Security Officer

About the Role

NewVerus is searching for a Data Security Officer to spearhead their inaugural Information Security function, supporting a portfolio of cloud-hosted ERP and SaaS applications for industrial clients worldwide. Based in Hull, this role offers an exciting chance to design and implement a comprehensive security program from the ground up within a stable and growing business software vendor.

Key Responsibilities

• Formulate and implement information security strategies, policies, and technical controls at a global level.
• Take responsibility for securing cloud environments, focusing primarily on Azure, but also gaining exposure to AWS and Oracle Cloud.
• Oversee Identity and Access Management, vulnerability management, and ongoing security monitoring.
• Strengthen systems for backup, disaster recovery, and business continuity to ensure robust operations.
• Develop and enforce incident response procedures to mitigate threats effectively.
• Plan and manage penetration testing initiatives, as well as follow up on remediation activities.
• Serve as the point of contact for customer security-related inquiries and documentation needs.
• Create a multi-year security roadmap aligning with frameworks such as ISO 27001 and Cyber Essentials Plus.
• Work collaboratively with Development, DevOps, and Cloud Operations teams to integrate security best practices.
• Support security due diligence and technical integration related to acquisitions.

Requirements

• In-depth hands-on experience with Azure security controls and configurations.
• Background in securing SaaS platforms hosted in the cloud.
• Proficiency in Microsoft Entra ID and managing identity and access systems.
• Expertise in backup, disaster recovery, and planning for business continuity.
• Knowledge of incident response strategies and vulnerability management tools.
• Demonstrated experience in developing security governance policies and frameworks.
• Ability to work autonomously, own technical decisions, and effectively collaborate with stakeholders.
• Certifications such as CISSP, CISM, or Azure Security Engineer (AZ-500) are highly desirable.
• Familiarity with security tools like Microsoft Defender, Microsoft Sentinel, DevSecOps methodologies, Infrastructure as Code security, as well as experience with AWS or Oracle Cloud, is considered a plus.

Additional Information

This role is ideal for those who pride themselves on being pragmatic, commercially minded, and driven to innovate rather than simply maintain the status quo. You will have the autonomy and support needed to establish foundational capabilities that will shape the company's security posture for years to come.