Information Security and Compliance Manager

- I will take responsibility for our information and data protection policies, practices, and settings, including sensitivity labels, data retention policies, and data loss protection policies. - I will collaborate with the Head of Risk, DPO, and VCISO to identify and manage information security risks and mitigating controls. - I will lead the wider business areas to ensure security policies and procedures are embedded in all business processes. - I will take an active role in the containment and reporting of information security incidents, including detection, response, remediation, and communication. - I will lead on the design and implementation of robust processes for reviewing and addressing the data security posture of third-party suppliers. - I will manage relationships with vendors and service providers to assess compliance with security and data protection policies and standards. - I will take the lead on the review process for information security policies, working to agreed review schedules, and ensure all policies are published and made available to all staff and volunteers to increase awareness. - I will develop policies and procedures in accordance with industry regulations and standards such as the Data Protection Act 2018, PCI-DSS, and ISO27001. - I will monitor tools for data governance, data security, and compliance to manage information security risks and regulatory requirements and detect and investigate possible information security incidents. ---