Executive Appointment Mandate
ID: EX-1008417171213
Information Security Compliance Manager
Compensation Bracket
£26,100 - £75,000
Tenure & Discipline
Executive Full-Time
Jurisdiction
United States
Statutory Visa Pathway
US Immigrant / H-1B
Submit Dossier Directly →
Official Verified Employer • $0 Candidate Fees
Executive Mandate Specification
Main Duties and Responsibilities
Working closely with the wider F1 Information Security team, you will use your knowledge to play a key role in overseeing F1’s security risk & compliance programs and focus on planning and implementing strategies for data governance and protection.
Main Duties and Responsibilities
- Supporting a small but high performing team focused on Governance, Risk & Compliance activities, reporting into the Information Security Manager
- Input into and drive forward F1’s security roadmap across Security Operations, Engineering & Architecture, and Governance Risk & Compliance.
- Oversee security compliance activities including ISO27001, PCI DSS, Cyber Essentials, continually seeking for more efficient, automated controls and ways of working.
- Input into security policies, standards, and procedures/processes that are suitable for the business and ensuring they are applied across relevant technology projects, systems, and services.
- Play a key role in implementing F1’s Data Governance and Data Loss Prevention (DLP) strategy, ensuring technologies, policies, and procedures are defined and implementing appropriately, working closely with the wider business.
- Review & help to define F1’s Incident management procedures/playbooks
- Define and manage a control assessment / assurance program to continually ensure security controls are operating effectively.
- Provide expertise in risk management and develop a scalable system for managing security risks, leveraging F1’s existing RM framework.
- Help in managing third party supplier security/compliance assessments, building relationships with key suppliers and outlining steps for security improvements where appropriate.
- Define and monitor security related performance metrics, communicate and present security updates to Information Security Manager and senior Management.
- Work with stakeholders and business units to identify and record details of data processing and advise on data lifecycle management (including identification, classification, retention, and deletion)
Skills / requirements
- Strong background implementing and managing security and regulatory frameworks including ISO27001, PCI DSS, Cyber Essentials, GDPR/DPA
- Data Loss Prevention – tools/technologies, data discovery & classification, policies & procedures
- Strong understanding of IT infrastructure, architecture, and information security.
- Knowledge of security tools & technologies within a large & complex environment including anti-malware / EDR, SIEM, DLP, etc.
- Background in security governance of a large supply-chain including security audits/assessments, reporting, and defining and implementing improvement roadmaps
- Experience in defining and implementing data governance projects within organisations, setting out plans and strategies for data discovery, classification, retention, and disposal.
- Experience in implementing security solutions across growing cloud environments and infrastructure.
- A track record of supporting multiple projects simultaneously
- Great interpersonal skills with experience in collaborating with colleagues across all seniority levels
INDHP
Statutory Executive Benefits & Governance
- Executive Health, Vision & Dental Coverage with Global Provider Options
- Corporate Pension Auto-Enrolment / 401(k) Retirement Plan with Fiduciary Matching
- Annual Discretionary Performance Incentive & Long-Term Equity Participation
- Executive Leave Allotment, Statutory Holidays & Dedicated Health Care Reserves
- US Department of Labor & E-Verify Work Authorization Sponsorship
🏛️ Explore Connected Career Corridors