Information Security & Compliance Officer

Information Security & Compliance Officer

Recruit4Talent Ltd – Meriden, Borough of Solihull

Information Security & Compliance Officer sought to join the IT department of an award-winning, national recruitment agency group as they continue to expand their digital presence across multiple brands.

This is a permanent, full-time role based fully onsite at the company’s Meriden office, with occasional travel to other company sites.

The Role:

As Information Security Compliance Officer, you will become the point of contact for information security, compliance, privacy systems (GDPR) and accreditations across the company.

You will report to and assist the Compliance Manager in liaising with critical stakeholders to ensure all elements of IT security are promoted and adhered to.

You’ll have the opportunity to leverage your existing skills while developing new ones, contributing to the strategic security objectives of the company, and ensuring adherence to critical accreditations including ISO 27001, GDPR, Cyber Essentials, and PCI DSS.

Your day-to-day responsibilities will include:

• Evaluate and enhance existing IT systems, management procedures, and security protocols to ensure robust protection.
• Oversee ISO 27001 and other key accreditations by collaborating with internal teams and external auditors.
• Manage information security requests and compliance reports, ensuring adherence to GDPR and other relevant standards.
• Lead and coordinate responses to personal data breaches and security incidents.
• Work closely with IT, H&S, HR, customers, and suppliers to ensure appropriate security measures are implemented across all systems.
• Create and refine policies and procedures that enhance the security and management of Company data.

The Person:

This role is ideal for an individual with a passion for information security and compliance, particularly within a Microsoft-centric environment. The successful candidate will demonstrate:

• Strong analytical skills with a meticulous approach to identifying and resolving security issues.
• Excellent verbal and written communication abilities, with a knack for translating technical concepts to non-technical stakeholders.
• Proficiency in Microsoft software and strong documentation skills.
• A proactive attitude towards learning and developing expertise in information security.
• Demonstrable expertise in external audit, compliance, and security processes (ISO27001, GDPR, Cyber Essentials and PCI DSS).
• Microsoft accreditation or other recognised certifications (e.g. Microsoft Learning, CISA, CISM, CRISC, CCSP) would be very beneficial.