IT Security Risk & Compliance Lead

Cyber UK; York and North Yorkshire; On-site; GBP 50,000 - 70,000; Full time

Job summary

A leading cybersecurity firm in North Yorkshire seeks an IT Security Risk & Compliance Lead. This role involves managing security risk across the organization, developing compliance knowledge, and delivering training. Candidates should have experience with IT systems, knowledge of control frameworks like ISO27001, and excellent stakeholder management skills.

Qualifications

• Proven experience in IT Systems within a corporate environment.
• Good understanding of security control frameworks and risk methodologies.
• Excellent ability to manage multiple projects and stakeholder engagement.

Responsibilities

• Manage and influence security risk management activities.
• Assist in the delivery of security policy and compliance management.
• Develop compliance knowledge through training and mentoring.

Skills

IT Systems experience

Control frameworks knowledge

Risk Management Methodologies knowledge

Strong technical skills

Effective communication

Presentation skills

Project management

Problem-solving

Training/coaching

Stakeholder management

Job description

• Location: Selby, North Yorkshire, England
• Salary: Market related
• Category
• Sector:
• Contract type Permanent
• Consultant: Tim Philpotts

The IT Security Risk & Compliance Lead plays a central role across Cyber and Information security. The primary purpose of this role is to manage and influence all aspects of security risk management activity across the Group, but particularly in respect to IT and Information Security. You will also assist in the delivery of Security Policy, Data Classification, and Compliance Management in accordance with policy and regulatory requirements.You will help develop the compliance knowledge and skills through the rollout of tools, policies and procedures, formal training and coaching and mentoring, working with individual Project Teams and Asset Owners ensuring that they understand their security responsibilities. You will also deliver against the business strategy, the technical roadmap and objectives set out in the Security strategy – covering Operational Information, Cyber, Digital and Physical.You’ll need to have

• Previous experience working with IT Systems in a corporate environment.
• Good knowledge of control frameworks such as ISO27001, ITIL (Information Technology Infrastructure Library), NIST, IEC 62443 and SABSA.
• Good knowledge of Risk Management Methodologies such as ISO27005, IRAM2 and IEC 62443 3-2.
• Strong technical skills across IT.
• Ability to interpret regulations and laws and communicate effectively to all levels of the organisation.
• Excellent presentation, project management, problem-solving, training/coaching, and conflict resolution skills.
• Ability to track and manage numerous parallel projects and activities.
• Ability to work successfully in a cross-functional team environment.
• Excellent stakeholder management.

There’s been significant investment and growth throughout the Cyber and Information Security function, you’ll be joining a high-calibre team in an environment where you’ll be able to have real impact.For full details please contact Tim Philpotts at Morson.