2 of 2 Data Protection Act Jobs in Stratford-upon-Avon

for a Head of Information Security to join us. In this position, you'll be responsible for developing and implementing Cancer Research UK's information security strategy, ensuring the protection of sensitive data, and maintaining compliance with relevant regulations. You'll lead a team of security professionals, manage security incidents, and foster a culture of security across the … security strategy, aligning with organisational goals and risk appetite. Incident Management: Oversee security incidents and investigations, ensuring effective response and remediation. Compliance and Governance: Ensure compliance with UK GDPR, Data Protection Act 2018, PCIDSS v4.0, and other relevant regulations. Collaborate with Data Privacy, Risk, and Audit teams. Security Operations: Implement and enhance security controls across various … Lead and develop a growing team of information security specialists (7+ FTE). What skills are we looking for? Significant experience of senior information security leadership in a multisite, data-rich environment, as well as hands-on experience with security architecture for cloud and hybrid networks. Highly effective people manager, of both technical and non-technical teams. Confidence engaging More ❯

Engage ). The governance frameworks, incident response protocols, and security strategies you design and embed will lay the foundations for Cancer Research UK's long-term resilience - safeguarding critical data and empowering our lifesaving work for years to come. If you are a Salesforce Information Security expert who has designed and delivered security strategies and transformational initiatives, we'd … thorough risk assessments to identify potential security threats and vulnerabilities within the Salesforce NPC environment. Security Controls Implementation:Developing and enforcing security controls, policies, and procedures to safeguard sensitive data and ensure compliance with industry standards. Incident Response:Establishing and managing incident response protocols to effectively address and mitigate security breaches or incidents. User Training and Awareness:As part … ensure rapid recovery. Subject matter expert in information security standards and best practices (including PCI DSS and ISO 27001) with an understanding of key UK legislation (such as the Data Protection Act 2018, GDPR, and PECR). Has built credible and collaborative relationships with Technology teams and senior leaders, demonstrating excellent interpersonal and communication skills with a More ❯