IT Compliance & Security Manager - Bath - £75,000

IT Compliance & Security Manager - Bath - £75,000

FTSE 250 company who provide FMCG products and services throughout the UK, Europe and North America require an IT Compliance manager.

This position will support and drive the compliance and risk standards throughout the business. Working closely with the leadership team while reporting direct to the Vice President of IT, you will ensure policies and security controls are maintained while proactively plan and deliver on business-critical compliance and IT Audits.

The right candidate will have an in-depth experience managing PCI DSS, Risk Managers and IT Audit implementing cyber governance.

The Role:

• Manage PCI DSS regular filing, reporting and compliance
• Manage the introduction of Cyber Essentials Plus certification and reporting
• Conduct Quarterly Audit of IT to ensure process and procedures are document and being followed
• Conduct Scheduled Audits of external service providers in regards to compliance and contracts
• Manage and maintain IT contracts
• Manage IT risk register
• Ensure security policies and Embedded and audited
• Coordinate security tasks between the IT Security Organisation and IT Organisation
• Develop a plan to ensure technical security control frameworks are applied to all business-critical systems and are operating effectively through the life cycle of the system
• Manage 3rd party vulnerability scanning and work with internal and external teams to resolve any vulnerabilities
• Evaluate the security requirements of information systems and specify appropriate controls to secure the system from cyber-attack with full autonomy
• Oversee functional testing of cyber security controls to ensure that they are operational and effective when deployed to protect information systems.
• Ability to provide assurance monitoring and on-going testing of security controls to ensure that they are operating effectively.
• Working with stakeholders across the business to ensure controls are operating effectively and supporting the needs of the users as well as achieving security.
• Produce a monthly compliance report
• Partner with training and development to provide Cyber Security training and awareness
• Lead monthly Cyber Security Steering Committee

The Requirement will include the following

• Proven experience with PCI DSS and Cyber Essentials Plus
• Come from an IT security compliance background or similar
• Ability to communicate with all levels of stakeholders and IT technical teams
• PCI ISA Qualification desirable

• Developing, documenting, and maintaining security policies, processes, procedures, and standards
• Security Architecture design
• Implementing cyber governance and security strategies
• Producing weekly/monthly/quarterly reports/dashboards
• Working with outputs of SOC tools/systems
• Risks associated with 3rd party supply chain
• Increasing security awareness, behavior, and culture

This is a great opportunity to join one of the UK's leading FMCG companies in a highly visible and business critical position.

The salary is a basic up to £75k with an excellent benefits package and additional bonus scheme. The role is hybrid with 2 days WFH and 3 days in the office which is near to the wonderful city of Bath (free parking)