Information Security and Compliance Manager

What you will do as our Information Security and Compliance Manager:

The Information Security and Compliance Manager is responsible for defining and implementing the organisation’s information security strategy to protect data, systems, and intellectual property. This role ensures compliance with UK, European and North American regulations and industry standards, while embedding security into the software development lifecycle.

What your key responsibilities will be:

Strategic Leadership

• Develop and execute a security strategy aligned with business and product objectives.
• Advise senior leadership on emerging threats, risk posture, and security investments.

Governance & Compliance

• Establish and maintain an information security governance framework.
• Ensure compliance with UK and international standards, including:
  • GDPR
  • PCI DSS
  • PCI 3DS
  • SOC 2
  • NIST 800-61 r3
• Oversee internal and external audits and certification processes.
• Manage and complete security assessments for 3rd parties, customers and insurance purposes.
• Work in partnership with the Legal team to define information security contractual requirements.
• Interact with customers, to demonstrate compliance with legal and contractual requirements.

Risk Management

• Audit risk assessment activity and determine mitigation strategies.
• Manage third-party and supply chain security risks.

Secure Development

• Work closely with engineering teams to:
  • integrate security into the software development lifecycle,
  • define secure coding standards and
  • oversee code review processes.

Security Operations

• Lead incident response and disaster recovery planning.
• Oversee vulnerability management, penetration testing, and threat intelligence.

Policy & Awareness

• Develop and enforce security policies and standards.
• Deliver security awareness training across the organisation.

#J-18808-Ljbffr…