Information and Technology Governance & Risk Lead

• Driving information and cyber security awareness
• Delivering security awareness training including phishing and facilitation of cyber scenario desktop simulations across central and manufacturing site teams
• Reviewing, managing and where required preparing responses to internal and external customer enquiries in relation to information and cyber security arrangements
• Supporting IT, procurement, legal, data protection and digital security and business stakeholder in relation to supplier information and cyber security due diligence and requirements
• Leading risk-based party security assurance, management, and continuous improvement activities
• Facilitating and coordinating IT risk management risk register, tools, process, reporting and review
• Managing a subset of aspects of ISO 27001 related documentation and control activities
• Managing and continuously improving I&T and Security risks processes in accordance with company risk appetite and tolerance
• Engaging risk review and assurance activities across existing suppliers
• Providing IT and business advice on aspects of security standards and regulations
• Engaging with I&T system owners to provide training in relation to information security, cyber resilience, phishing, and facilitation of cyber scenario desktop simulations

• Working knowledge of technology and security standards, controls and consequences across both IT and manufacturing environments in manufacturing or similar industries
• Experience working with information security standards and frameworks such as and regulations such as ISO27001, NIST CSF, PCI DSS, NISD and NIS2
• Proven analytical, problem-solving, planning, project delivery and supplier work packages management skills
• Demonstrable experience of engaging across all levels of a company in relation to information and cyber security risks
• Working towards or achieved professional certifications (ISO27001 lead, ISC2, CISM or CRISC) advantageous

Working towards or achieved professional certifications (ISO27001 lead, ISC2, CISM or CRISC)

• Competitive salary
• Company bonus
• Pension scheme
• Life assurance
• Income protection
• 25 days holiday plus bank holidays
• Electric Car / Bike to Work schemes