Job Description
About Retail inMotion
Retail inMotion delivers end-to-end onboard retail solutions for airlines across the globe—from product design and logistics to digital innovation and crew engagement. With creativity, ownership, and joy at the heart of our culture, we're here to challenge the status quo and transform the inflight experience.
About the role:
As an Information Security Officer at Retail inMotion, you will be a key member of the Information Security team, reporting directly to the Head of Technology Operations/CTO. Your primary responsibility will be to lead the implementation and ongoing management of our organisation-wide Information Security Management System (ISMS). You'll collaborate closely with IT Operations and all departments to ensure security is embedded throughout the business, raising awareness and driving a culture of security across Retail inMotion.
Job Requirements
Requirements:
Knowledge & Experience:
• 5+ years' relevant experience and a related degree.
• Security certifications such as CISSP or CISM.
• Strong experience with ISO 27001, PCI DSS, internal audits, and GDPR.
• Hands-on knowledge of AWS security and Office 365 Security & Compliance.
• Strong understanding of encryption, networking, OSI Model, vulnerability scoring (CVSS), cloud security, scripting/automation, OS security, and mobile/ application security.
Skills & Competencies:
• Awareness of emerging technologies and threats (e.g., AI).
• Ability to explain technical concepts clearly and influence senior stakeholders.
• Strong problem-solving skills, attention to detail, and excellent communication.
• Comfortable working independently and collaboratively.
Job Responsibilities
Responsibilities:
• ISMS Ownership: Lead the deployment, maintenance, and continuous improvement of our Information Security Management System in line with ISO 27001, PCI DSS, and business objectives.
• Policies & Training: Develop and update Information Security policies and deliver engaging staff training.
• Audit & Compliance: Coordinate internal and external audits, especially PCI DSS and ISO 27001 related, ensuring full compliance and audit readiness.
• Threat Monitoring: Analyse alerts, manage vulnerabilities, and work with teams to mitigate risks.
• Incident Management: Partner with IT Operations to triage, investigate, and resolve security incidents with thorough documentation.
• Security Culture: Drive awareness initiatives and clearly communicate key security matters to leadership.
• Projects & Continuity: Lead security projects and maintain robust Business Continuity Management plans.
• Risk & Non-Compliance: Oversee IT security risk management, supplier security assessments, and remediation of non-compliance issues.
• Customer Engagement: Represent the organisation in RFPs, clearly outlining security controls to customers.
• Collaboration: Work with departments across the business to embed security into processes.
Job Benefits
Benefits:
• Hybrid work & Flexitime
• 27 days Annual Leave
• Bonus scheme
• Free onsite lunch and health snacks options
• Great work-life balance
• Friendly, international team
• Exciting career opportunity in the global travel retail space
We are an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees, regardless of gender, age, disability, ethnicity, religion, sexual orientation, or any other protected characteristic.