Information Security & Compliance Officer

Information Security & Compliance Officer

Information Security & Compliance Officer sought to join the IT department of an award-winning, national recruitment agency group as they continue to expand their digital presence across multiple brands.

This is a permanent, full-time role based fully onsite at the company’s Meriden office, with occasional travel to other company sites.

The Role:
As Information Security Compliance Officer, you will become the point of contact for information security, compliance, privacy systems (GDPR) and accreditations across the company. You will report to and assist the Compliance Manager in liaising with critical stakeholders to ensure all elements of IT security are promoted and adhered to.

You’ll have the opportunity to leverage your existing skills while developing new ones, contributing to the strategic security objectives of the company, and ensuring adherence to critical accreditations including ISO 27001, GDPR, Cyber Essentials, and PCI DSS.

Your day-to-day responsibilities will include:

1. Evaluate and enhance existing IT systems, management procedures, and security protocols to ensure robust protection.
2. Oversee ISO 27001 and other key accreditations by collaborating with internal teams and external auditors.
3. Manage information security requests and compliance reports, ensuring adherence to GDPR and other relevant standards.
4. Lead and coordinate responses to personal data breaches and security incidents.
5. Work closely with IT, H&S, HR, customers, and suppliers to ensure appropriate security measures are implemented across all systems.
6. Create and refine policies and procedures that enhance the security and management of Company data.

The Person:
This role is ideal for an individual with a passion for information security and compliance, particularly within a Microsoft-centric environment. The successful candidate will demonstrate:

1. Strong analytical skills with a meticulous approach to identifying and resolving security issues.
2. Excellent verbal and written communication abilities, with a knack for translating technical concepts to non-technical stakeholders.
3. Proficiency in Microsoft software and strong documentation skills.
4. A proactive attitude towards learning and developing expertise in information security.
5. Happy to travel occasionally to other sites as required.

Desirable Experience:
Demonstrable expertise in external audit, compliance, and security processes (ISO27001, GDPR, Cyber Essentials and PCI DSS). Microsoft accreditation or other recognised certifications (e.g. Microsoft Learning, CISA, CISM, CRISC, CCSP) would be very beneficial.

Benefits:
£30,000 - £35,000 salary negotiable depending on experience
32 days holiday rising with service to 37 max including bank holidays
Comprehensive training and mentoring with opportunities for personal and professional growth
9am-5.30pm Mon to Thursday, 9am-5pm Friday
Flexible working arrangements
Free onsite parking (includes electric charging points)
Nest Pension
Access to discounts app
Subsidised bistro
Indoor gym
Squash court and recreation area
A supportive and inclusive work culture that fosters collaboration and innovation

Location: Meriden, Coventry, Warwickshire

Salary: £30,000 - £35,000 (negotiable depending on experience) + benefits