GRC Information Security Lead (ISO 27001, GDPR)

Paddock; Biggin Hill; On-site; GBP 65,000 - 90,000; Full time

Benefits offered by this job

Private Healthcare scheme

Dental Care

4 x Grand Prix paddock passes per seaa

Free staff shuttle service

25 days annual leave + 8 bank holidays

Job summary

Formula 1 is hiring an Information Security Officer to join the IT department. You will deliver governance, risk, and compliance projects, reporting to the Information Security Compliance Manager. The role focuses on securing data, managing third party assessments, and driving proactive security controls across F1's global operations.

You will define and monitor policies, support AI tooling governance, and engage with senior stakeholders to drive security improvements across the organisation.

Qualifications

• Experience leading information security GRC focused programs and risk management activities.
• Vendor/third party audit and compliance management.
• Security compliance with ISO27001, PCI DSS, GDPR.
• Incident response and BC/DR planning and testing.
• Data governance and DLP projects.
• Understanding legal and regulatory information security frameworks.

Responsibilities

• Lead in monitoring and managing compliance programs aligned to security frameworks and regulations such as ISO 27001, PCI DSS, GDPR.
• Support the definition and growth of the Security Control Framework across business functions.
• Provide risk management expertise and reporting through dashboards and workshops.
• Create, review, and maintain security policies, standards, and procedures across projects and services.
• Coordinate internal and external security audits and evidence gathering.
• Support data governance and security controls for data lifecycle management.

Skills

GRC leadership

Risk management

Security governance

Regulatory compliance

Security policies

Stakeholder communication

Education

CISSP

CISM

ISO27001 LI/LA

Tools

SIEM

DLP

CASB

AV

Job description

Formula 1 is hiring an Information Security Officer to join the IT department. You will deliver governance, risk, and compliance projects, reporting to the Information Security Compliance Manager. The role focuses on securing data, managing third party assessments, and driving proactive security controls across F1's global operations.

You will define and monitor policies, support AI tooling governance, and engage with senior stakeholders to drive security improvements across the organisation.