Security & Compliance Officer

**Company Description**
Eurofins Forensic Services (EFS) is the largest forensic service provider in the UK and Europe. We are part of Eurofins Scientific, which is an international life sciences company, providing a unique range of analytical testing services to clients across multiple industries, to make life and our environment safer, healthier and more sustainable. From the food you eat, to the water you drink, to the medicines you rely on and forensics. Eurofins laboratories work with the biggest companies in the world to ensure the products they supply are safe, their ingredients are authentic, and labelling is accurate. Eurofins is dedicated to delivering testing services that contribute to the health and safety of society and the planet, and to its corporate responsibility to protect the environment and ensure diversity, equity, and inclusion across the entire network of Eurofins companies.

In over 35 years, Eurofins has grown from one laboratory in Nantes, France to 61,000 staff across a decentralised and entrepreneurial network of ca. 900 laboratories in 61 countries. Eurofins companies offer a portfolio of over 200,000 analytical methods to evaluate the safety, identity, composition, authenticity, origin, traceability and purity of biological substances and products. In 2022, Eurofins generated total revenues of EUR 6.7 billion and has been among the best performing stocks in Europe over the past 20 years.

This is an exciting opportunity to join the Quality and Compliance team to engage on all physical and information security matters and to provide support to Security and Compliance Manager.

The role offers flexibility to work remotely. Travel to various CFS and EFS sites will be necessary, so applicants should hold a valid UK driving licence or be willing to travel by alternative means.

**Key Responsibilities and Accountabilities**
- Undertake internal audits to maintain and improve accreditation /certification to identified standards including but not exclusive to ISO27001, Cyber Essentials Plus, ISO17025 and the Forensic Science Regulator Code of Practice.
- Facilitate external stakeholder audits and visit in relation to security, data protection and information security.
- To undertake and lead as required on the investigation of security and data protection incidents, identifying root cause and implementing preventative and corrective actions.
- Promote a positive security culture.
- Support the implementation of physical / data security and data protection processes and standards.
- Undertake all administrative duties and general functions of the Quality and Compliance team.
- To support the development and delivery of security and data protection training and communication programmes.
- Input, maintain and collate all relevant data to support Quality and Compliance functionality.
- Communicate, escalate and inform all relevant parties of improvement opportunities.
- Ensure security and data protection processes are followed.
- To provide support to the wider Quality and Compliance team as required (Quality audits and investigations).
- Undertake any other identified duties as required.

**Qualifications**
It is essential that the post holder can demonstrate:

- Experience of working within an Information Security Management System (ISMS).
- Competence and aptitude in being able to handle complex and varied workloads including ability to prioritise.
- Computer literacy to a competent level.
- An awareness of the Forensic Science Regulator Code of Practice.
- A good knowledge of security standards e.g. ISO27001 and Data Protection Act 2018/ GDPR.

The Holder of the post must have, or be willing to achieve in a reasonable timeframe:

- Competency in conducting audits within an ISO27001, Forensic Science Regulators Code of Practice and Data Protection capacity.
- Awareness of ISO17025.
- Knowledge of root cause analysis tools e.g. 5Why or has demonstrable investigative experience.
- An understanding of how to undertake and review Privacy Impact Assessments (PIA).

**Person Specification**
- Work collaboratively as part of the Quality and Compliance team.
- Attention to detail with an ability to make informed decisions as an outcome of audit or investigation
- A good communicator who is able to advocate and implement best security and data protection practice.

**Additional Information**

In return for your hard work and loyal service, we will offer you a competitive salary, and a selection of employee benefits via our flexible benefits menu which includes cycle to work, give as you earn, volunteering days, buy and sell holiday. In addition, we also offer the following:

- Life Assurance (3 times annual salary)
- Scottish Widows Company Pension Plan
- 25 days annual leave plus bank holidays (increasing to a maximum of 30 days)
- Employee length of service awards and yearly recognition schemes, celebrating work anniversaries here at EFS.
- Employee tech scheme
- Discount vouchers and flexi