Senior Manager, Security & Compliance

Role: Senior Manager, Security & Compliance

Location: Hybrid, 20% London office based per month

Salary: £75k – £85k

JOB PURPOSE

To be an experienced, proactive, and collaborative senior manager of the Security Operations Centre, leading a team of security, compliance and governance analysts and engineers. To improve, monitor, manage and ensure compliance to a security and governance framework that reduces unnecessary risk and ensures the protection of our data and the effective and secure use of technology in the company. To be responsible for leading on risk and overseeing the security of our technology ecosystem, including end user solutions, cloud environments, networks, and on-premises systems.

KEY ACCOUNTABILITIES

The key accountabilities for this role are to:

· Provide leadership, mentorship, and strategically aligned tactical direction for a team of experts, helping to grow a high performing team and encouraging a culture of security by design, innovation, and collaboration.

· Influence key partners to prioritize remediation of security issues, ensure alignment and compliance to the control environment and mitigate threats to the company.

· Optimize risk management, leading risk assessments and vulnerability analysis.

· Lead the Infrastructure & Operations response to security incidents, including investigation, containment and remediation.

· Develop and improve our control environment that defines the roles, responsibilities, processes, policies, and standards for the secure use of technology at the company.

· Lead large change initiatives. Collaborate with senior leaders and cross-functional teams to identify, evaluate, and prioritize critical improvements and ensure effective organisational change.

· Ensure compliance to regulations, standards and internal policies, using key performance indicators, audits and ongoing monitoring and reporting.

· Ensure effective monitoring of security systems and alerts. Use security and compliance reporting to enable effective decision making and prompt and effective responses.

· Provide thought leadership, research, and evaluate emerging security trends and technologies, regulations, and standard methodologies to find opportunities and challenges for improving our security position.

· Take the lead on audits including Finance, PCI, SOC2, and StateRAMP.

· Lead the team through key events, acting as a point of escalation for resolution of complex issues, improving our approach to Data Subject Access Requests, data concerns, business continuity events and security incidents.

· Be responsible for training, guidance, and support to our technology users on security, data protection, and privacy.

· Act as a champion for data privacy and security, promoting a culture of awareness, resilience and accountability across the organization.

SKILLS, QUALIFICATIONS & EXPERIENCE

· Experience in managing and leading a team in security, privacy and data protection.

· Solid understanding of IT infrastructure with proficiency in security tools and technologies.

· Experience with or formal qualifications in CISSP, CISM or similar and demonstrated continuous professional learning.

· Good understanding and passion for the latest security and risk management approaches.

· Excellent partner management, influencing and communication skills, with the ability to communicate complex security and privacy concepts to a non-technical audience.

· Demonstrable experience of leadership for enterprise-wide change initiatives.

· Extensive experience of data protection legislation including GDPR and CCPA/CPRA.

· Demonstrable knowledge of security standards including SOC2, PCI and NIST.

· Good communication skills, able to express ideas and messages clearly, both written and verbally.

Job Types: Full-time, Permanent

Pay: £75,000.00-£85,000.00 per year

Benefits:

• Company pension
• Employee discount
• Private medical insurance
• Work from home

Schedule:

• Monday to Friday

Work Location: Hybrid remote in London