3 of 3 Remote/Hybrid Information Security Management Jobs in the North of England

Opportunity Our client is looking to appoint an experienced ICT Cyber & Information Security Manager to take responsibility for a broad range of cyber security, information security, risk and compliance activities across the organisation. This is a key role within the Information Security function … providing the opportunity to take ownership of security activities ranging from the ICT Annual Delivery Plan through to major business growth initiatives, including site transitions and acquisitions across the UK and internationally. You'll work closely with internal teams, senior stakeholders and external partners to strengthen the organisation ...

. Policies & Documentation: Maintain all data protection policies, procedures and documentation, including DPIAs, privacy notices, breach logs and SAR logs. Support development of the Information Security Management System. Compliance Management: Lead audits and compliance activities to meet UK/EU GDPR, PECR and other regulatory requirements. … safeguards. Regulatory Liaison: Act as the primary contact for the ICO, DPC and other regulatory bodies, managing enquiries, investigations and reporting duties. Incident & Breach Management: Lead breach assessments, investigations and reporting, ensuring effective mitigation, documentation and communication. Training & Awareness: Design and deliver training initiatives, keeping colleagues informed on data ...

line. This is a fixed term position for 12 months. Key Responsibilities Own the consumer-facing regulatory document set across all markets - contract information documents, complaints codes, vulnerable customer policies, price transparency, and ADR signposting - keeping these accurate as products and prices evolve. Manage NIS2 registration and incident notification … that support them. Run data protection and transfer impact assessments for new systems and suppliers; keep DPAs and sub-processor records current. Support the information security management system where it overlaps with data protection this is a documentation and governance role, not a security engineering one. ...