Business Information Security Officer

Precisely Write, Inc.; Remote; GBP 60,000 - GBP 90,000; Full time

Job summary

A global data integrity firm seeks an Information Security Manager to lead security initiatives within the Engage business unit. The ideal candidate will align security practices with industry standards and manage compliance with certifications such as ISO 27001 and GDPR. Key responsibilities include coordinating security audits, managing risks, and supporting incident response processes. A strong understanding of compliance frameworks and excellent communication skills are essential. This role promotes a flexible work culture across multiple locations.

Benefits

Career development opportunities

Diversity and inclusion initiatives

Flexible work-from-anywhere policy

Qualifications

• Experience in managing an Information Security Management System.
• Proficiency in completing Information Security questionnaires.
• Strong background in compliance and regulatory frameworks.

Responsibilities

• Align Information Security Management System across Engage unit.
• Maintain relevant security certifications for Engage products.
• Coordinate security controls, audits, and reviews.
• Communicate security risks to leadership.

Skills

Communication skills

Risk management

Knowledge of GDPR

Application Security understanding

Management experience

Education

Relevant degree or equivalent experience

Tools

GRC platforms

Penetration testing tools

Job description

Application and Interview Impersonation Notice: Impersonating another individual when applying for employment, and/or participating in an interview process to assist another individual in obtaining employment, with Precisely Software Incorporated (“Precisely”) is unlawful. If Precisely identifies such fraudulent conduct, then as applicable and to the extent permitted by law, the application will be rejected, an offer (if made) will be rescinded, or the employment will be terminated, and legal action may be taken against the impersonators.

Precisely is the leader in data integrity. We empower businesses to make more confident decisions based on trusted data through a unique combination of software, data enrichment products and strategic services. What does this mean to you? For starters, it means joining a company focused on delivering outstanding innovation and support that helps customers increase revenue, lower costs and reduce risk. In fact, Precisely powers better decisions for more than 12,000 global organizations, including 95 of the Fortune 100. Precisely’s 2,500 employees are unified by four company core values that are central to who we are and how we operate: Openness, Determination, Individuality, and Collaboration. We are committed to career development for our employees and offer opportunities for growth, learning and building community. With a "work from anywhere" culture, we celebrate diversity in a distributed environment with a presence in 30 countries as well as 20 offices in over 5 continents. Learn more about why it’s an exciting time to join Precisely!

Overview

Engage is a business unit that builds software products that process personal data, and we are looking for an Information Security Manager who can align product design with security and privacy requirements. You will lead a team that manages technical and process security controls, and you will work within our broader security and governance model under the guidance of our security and privacy leaders. You will help keep our controls current, support audits, and ensure that product and services teams follow our security policies. You will also partner with compliance groups and external auditors to maintain certifications and meet regulatory needs. You will communicate risks to our security risk boards and leadership teams. You will succeed in this role by understanding our technology, staying current with security standards, and bringing strong experience from similar roles in distributed organizations. This role will report to senior director of software development.

What You Will Do

• Align to Precisely Information Security Management System across the Engage business unit that addresses the needs of Engage, staff, partners, customers, and other external stakeholders in line with relevant legislation and industry standards
• Maintain current SOC 1 & 2 Type II, HIPAA HITECH and ISO 27001 & 27701 certification for Engage software products.
• Maintain documentation and processes necessary to comply with contractual obligations, customer security requirements and internal requirements.
• Propose changes to the Engage Information and Cyber Security systems, processes and procedures by continuously analysing and reviewing appropriate security technologies and practices as informed by Precisely standards.
• Ensure that information and Cyber Security risks to Engage are identified and managed appropriately. Communicate security risks to Precisely InfoSec Risk Board and senior leadership.
• Coordinate quarterly DAST scans, annual internal pen testing and annual third-party penetration testing across all Engage products.
• Maintain accurate security scorecards across all products. Work with product teams to prioritise work to improve security score.
• Coordinate annual legal review of privacy across Engage products.
• Assist investigations into information security breaches under Precisely Incident Response process with Precisely CyberSecurity Operations Center ensuring root-causes of such breaches are understood and addressed.
• Assist as SME in responding to information security questionnaires during RFP process.

What we are looking for

• Management of an Information Security Management System in a complex IT organisation encompassing service delivery, application development and IT infrastructure.
• Completion of Information Security questionnaires as part of RFP responses.
• Line management of team members.

Knowledge

• An excellent understanding of best practice within Information Security and risk management including standards such as ISO 27001.
• A strong understanding of one or more areas or legislation and regulations that impact information Security e.g. GDPR, HIPAA, PCIDSS, CCPA.
• An understanding of current and emerging threats and countermeasures and the product challenges to addressing these threats.
• An understanding of Application Security threats and countermeasures.
• A good practical knowledge of security technologies and wider business solutions including DevOps, Identity and Access Management, penetration testing tools, remote working and cloud technologies.

Skills

• The ability to work within a compliance or regulatory framework and to evidence continuous improvement.
• Excellent communication skills, both written and verbal. Ability to present complex or highly technical issues in simple and easy-to-understand formats. and systematically while recognising the need to deliver to the business requirements.
• The ability to be pragmatic while balancing the needs of the business against security.
• The ability to cut through organisational and political barriers to achieve the overall goal.

Qualifications

• An appropriate degree, equivalent qualification or experience.

Preferred Requirements

• One or more of the following qualifications are highly desirable:
• Certified Information Security Manager (CISM)
• Certified Information Systems Security Professional (CISSP)
• Certified Information systems Auditor (CISA)
• Achieved Senior or Lead level certification in the NCSC’s Certified Cyber Professional scheme in one or more of Security and Information Risk Advisor (SIRA), IA Architect, IA Auditor, IT Security Officer
• Experience using GRC platforms to define and manage InfoSec policies, prepare for audits and manage risk.
• Experience of tooling to manage RFP responses.
• Perform SAST/DAST scans & Pen Test assessments.
• Experience with automated cloud compliance.

The personal data that you provide as a part of this job application will be handled in accordance with relevant laws. For more information about how Precisely handles the personal data of job applicants, please see the Precisely Candidate Privacy Notice.