Information Security and Compliance Officer

Network IT Recruitment
Network IT are seeking a highly skilled and motivated individual to join our team as an Information Security and Compliance Officer.

The role will be based near Birmingham Airport, in Meriden, and requires you sully on-site. This Information Security and Compliance Officer role you will be responsible for developing, implementing, and maintaining our organisation’s information security and compliance program. You will play a vital role in protecting our sensitive information, ensuring regulatory compliance, and mitigating security risks.

Responsibilities:

• Develop and maintain an information security and compliance framework: Create and implement policies, procedures, and guidelines to establish an effective information security and compliance program aligned with industry standards and regulations.
• Ensure regulatory compliance: Stay up-to-date with relevant laws, regulations, and industry standards (such as GDPR, ISO27001, Cyber Essentials, etc.) and ensure our organisation’s compliance. Monitor changes in regulations and update policies and procedures accordingly.
• Conduct risk assessments: Identify and assess potential security risks and vulnerabilities, both internally and externally, and develop strategies to mitigate and manage them effectively. Perform regular risk assessments and maintain risk registers.
• Establish and enforce security policies: Develop and enforce information security policies, standards, and guidelines across the organisation. Educate employees on security best practices and provide training programs to promote awareness and adherence to security policies.
• Monitor and investigate security incidents: Implement security monitoring systems and processes to detect and respond to security incidents. Conduct investigations into security breaches, incidents, or policy violations, and develop appropriate incident response plans.
• Manage vendor relationships: Evaluate and manage relationships with external vendors and contractors to ensure their compliance with our organization’s security and privacy requirements. Conduct vendor risk assessments and ensure contractual agreements include appropriate security clauses.
• Conduct audits and assessments: Plan and execute internal and external security audits and assessments to measure compliance with established policies, procedures, and regulations. Coordinate remediation efforts for identified deficiencies.
• Incident response and disaster recovery: Develop and maintain an incident response plan and disaster recovery procedures. Test and update these plans regularly to ensure their effectiveness and readiness.
• Security awareness and training: Develop and deliver security awareness programs and training sessions to educate employees on security best practices, policies, and procedures. Promote a culture of security awareness throughout the organisation.
• Stay informed on emerging threats and technologies: Keep abreast of the latest industry trends, emerging threats, and technological advancements in the field of information security.
• Make recommendations on security enhancements and advise management on potential impacts.

Qualifications:

• Relevant professional certifications such as CISSP, CISM, CRISC, or similar.
• Proven experience in information security management, compliance, or related roles.
• Strong understanding of relevant regulations and frameworks (eg, GDPR, ISO 27001, Cyber Essentials).
• Knowledge of security technologies, tools, and best practices.
• Attention to detail and the ability to manage multiple priorities effectively.

Join our team and contribute to the protection of our organisation’s valuable information assets and ensure compliance with regulations and industry standards. Apply now to make a difference in the field of information security and compliance.