We are seeking an Information Security & Compliance Officer to support and strengthen our organisation’s security and compliance posture.
This role is responsible for coordinating security activities across the business, supporting compliance initiatives, managing third-party risk, and acting as the internal liaison with our outsourced Security Operations Centre (SOC) and Virtual CISO.
The successful candidate will help implement security governance, risk management, and compliance frameworks while ensuring security best practices are embedded across the organisation.
This role is ideal for someone with experience in security operations, governance, risk, and compliance (GRC) who enjoys working across teams to improve organisational security maturity.
Key Responsibilities
Security Operations Oversight
- Act as the primary internal liaison with the outsourced SOC provider
- Monitor and coordinate responses to alerts generated through Microsoft Sentinel and Microsoft Defender
- Support incident response coordination and internal communications
- Track remediation of security vulnerabilities and incidents
Governance, Risk & Compliance
- Support the implementation and maintenance of security frameworks such as:
- ISO 27001
- Cyber Essentials Plus
- NIST / CIS frameworks
- Maintain and develop security policies, standards, and procedures
- Conduct risk assessments and track remediation actions
- Coordinate internal and external security audits
- Coordinate with other governance teams to ensure alignment around key initiatives
Third Party Risk Management (TPRM)
- Lead the rollout and ongoing management of a Third Party Risk Management programme
- Perform vendor security assessments and due diligence
- Maintain vendor risk registers and track remediation activities
- Work with procurement and legal teams to embed security requirements into supplier onboarding
Security Governance & Awareness
- Support security awareness and training initiatives across the organisation
- Work with IT and engineering teams to ensure security best practices are followed
- Maintain risk registers and compliance documentation
- Provide reporting and metrics on security posture to leadership
Security Projects & Initiatives
- Support compliance initiatives and security improvement programmes
- Work with the virtual CISO to implement strategic security improvements
- Assist with policy development and control implementation
- Help coordinate vulnerability management and remediation programmes
- Provide input into client security questionnaires and audits where appropriate.
Requirements
Skills & Experience
- 3–5 years experience in information security, IT security, or compliance
- Understanding of security governance, risk, and compliance (GRC)
- Experience with Microsoft security tooling (Sentinel, Defender, or Microsoft Security stack)
- Familiarity with security frameworks (ISO 27001, NIST, CIS, Cyber Essentials)
- Experience working with third party vendors or supplier risk assessments
- Strong communication and stakeholder management skills
- Ability to translate security requirements into practical business processes
Desirable
- Experience working with outsourced SOC providers
- Knowledge of Third Party Risk Management (TPRM) programmes
- Experience supporting ISO 27001 certification or audits
- Certifications such as:
- ISO 27001 Lead Implementer / Lead Auditor
- CISSP
- CISM
- Security+
Key Competencies
- Strong organisational and documentation skills
- Ability to manage multiple compliance initiatives simultaneously
- Analytical thinking and risk assessment capability
- Collaborative approach to working across technical and non-technical teams
- Proactive mindset with a focus on continuous improvement
What Success Looks Like
Within the first 12 months you will:
- Establish a structured Third Party Risk Management programme
- Improve visibility and reporting of security risks
- Strengthen security governance processes
- Develop ISO 27001 implementation roadmap and compliance processes to ensure group compliance can evolve to a recognized standard within the next 12-18 months.
- Improve collaboration between internal teams, the SOC provider, and the virtual CISO
What we do:
PEI sits at the centre of one of the most dynamic industries in global finance. Private markets have grown from a niche corner of the investment world into an industry with $15 trillion AUM, spanning dozens of strategies, hundreds of geographies and thousands of funds. The professionals navigating it rely on us to make sharper decisions.
Today, PEI operates a range of platforms, each dedicated to a major asset class or investment theme; from private equity and infrastructure to real estate, private credit and beyond.
What makes us genuinely different is what we bring together. Data-enabled tools. Data-enriched insight. Built on powerful proprietary datasets. Editorial insights based on deep market knowledge and experience. The networks and communities that convene the people who move and manage capital. No other business is this well connected. This shapes everything we build, every hire we make, and every decision we take.
Who we’re looking for:
Our 500+ team spans Europe, APAC and the Americas – researchers, journalists, data scientists, product engineers, events professionals, marketers and commercial specialists – all working to give private markets professionals the intelligence edge they need.
Central to everything we do is our people. We’ve built a culture where talent grows, careers are built with intention, and everyone has the opportunity to learn, grow, and make their mark.
At PEI we value diverse talent and welcome applications from everyone – regardless of background. We are an equal opportunity employer and our inclusive culture at PEI is reflected in every stage of the recruitment journey. Please inform us at initial stages of the recruitment process if you require any reasonable adjustments and we can accommodate this.
PEI Group supports flexible working arrangements, and we welcome career returners.
