Security and Compliance Manager - Gourock

This job has now expired please search on the home page to find live IT Jobs.

Spring Technology is currently recruiting a Security and Compliance Manager for our client based in Gourock.

The Company

Spring Technology's client is a public sector organisation that is one of the largest employers in Inverclyde, employing over 1300 people; they are a customer focused organisation at the forefront of their industry.

The role: Security and Compliance Manager

This role is responsible for the on-going management and development the businesses Security Management System, including security governance, risk management and compliance with ISO 27001. You will ensure that the business is working in line with PCI DSS; through policy alignment and governance whilst ensuring that operational risk is fully mitigated. You will build relationships with people across the business and always be supported to develop innovative solutions and new practices.

.

Responsibilities include:

*Provide technical experience on security technology and regulation to define the principles and standards that guide security decisions

*Documentation of the security risk assessments to identify any issues or risks that require to be articulated to senior management for remediation and/or to follow formal risk acceptance governance processes

*Develop processes and configuration documents to be followed by IT operations and third party suppliers in line with security standards

*Develop and maintain standards for security management, interpret security policies and contribute to the development of compliant standards and guidelines

*Maintain relevant policies and procedures, accredited to the ISO27001 standard

*Conduct internal audits, develop and maintain relevant documentation

*Manage corporate policies and procedures inline with PCI DSS compliance and EU GDPR

Your skills and experience will include:

Essential:

*Relevant professional certification CISM, CISSP

*Proven track record working in a security and compliance role

*Qualification in risk management

*Lead auditor certification of ISO 27001

*Certification in PCI-DSS standard

*Knowledge of risk assessment, auditing approaches and methodologies

Desirable:

*ITIL Certification

Benefits:

*Good salary and benefits package

*Transport links close to office

*You'll be joining an excellent working environment in a highly customer focused organisation, that is fast paced and committed to developing its employees

Spring Technology is acting as an Employment Business in relation to this vacancy.

Spring Technology is an Equal Opportunities employer; we welcome applicants from all backgrounds.