IT Security

**?? Group Info Sec & Compliance Manager - York - £60k ??**

?? **Title**: Group Information Security & Compliance Manager

?? **Location**: York - Hybrid

?? **Salary**: £60K

My client being in the transportation industry, are looking for a new member of their technical team to join them on a permanent basis.

**Role**:

- Implements the QMS and ISMS framework in line with ISO9001 and ISO27001 standard
- Support the business in maintaining compliance with PCI DSS and completion of pre-tender questionnaires relating to information security assessments
- Conduct internal audits and host external audit engagements and coordinate the remediation of audit concerns and non-conformities.
- Ensure the organisation's policies, processes and procedures continue to be aligned with the ISO and PCI DSS standards
- Provide proactive day-to-day advice on current information security issues
- Coordinate, respond to and investigate security and data protection incidents and breaches
- Conduct impact assessments on proposed changes and/or updates in support of new initiatives and system solutions
- Provide on-going security awareness training across the Group
- Working with internal QA, BA and Change Management roles to deliver projects in a compliant manner, ensuring associated risks are managed and communicated appropriately.

**Technical Skills**:

- Knowledge of ISO9001 & ISO27001
- Knowledge of the Data Protection Act 2018, PCI DSS & GDPR UK
- Knowledge of 3PL/BPO & payment processes
- Experience in similar governance and/or auditing roles
- Experience in a multi-disciplinary team with 3rd party stakeholders
- Good analytical skills
- Customer-focussed approach

**Benefits**:

- 28 Days holiday
- Onsite parking
- Onsite gym
- Competitive pension scheme
- Employee Discount Scheme
- Fast progression plan
- Flexible working - hybrid

If this role sounds interesting you, please **APPLY**by sending over an updated copy of your CV for review.