Head of IT Security Compliance

Crimson Limited; Metropolitan Borough of Solihull; Hybrid; GBP 90,000 - 110,000; Full time

Job summary

A successful global company in Solihull is looking for a Head of IT Security Compliance. This role involves ensuring compliance with IT security policies, conducting risk assessments, and developing security strategies. The ideal candidate will have extensive IT security experience and leadership skills. The position offers a salary between £90,000 and £110,000 with hybrid work options after the initial three months.

Qualifications

• Extensive experience in IT security, compliance, or related roles, previously in a leadership position.
• Broad understanding of IT security for a FTSE 100.
• Strong understanding of regulatory requirements (e.g., GDPR, ISO 27001, NIST).
• Proven ability to lead and manage cross-functional teams.

Responsibilities

• Develop and maintain IT security policies and procedures.
• Conduct regular risk assessments to identify potential security threats and vulnerabilities.
• Monitor and audit IT systems and processes for compliance.
• Develop and deliver training on IT security policies.
• Collaborate with stakeholders to ensure compliance coverage.
• Prepare and present compliance reports to senior management.
• Provide leadership and support to direct reports.

Skills

IT security experience

Compliance understanding

Analytical skills

Problem-solving skills

Leadership ability

Communication skills

Job description

Head of IT Security Compliance - Solihull

Crimson and IMI have joined forces to build IMI's new security team, and we are looking for talented individuals to join us on this exciting journey. If you are passionate about IT security and want to be part of a dynamic team that is shaping the future of security within a successful global company, we want to hear from you!

We are seeking a highly skilled and experienced Head of IT Security Compliance to join our team. In this role, you will be responsible for ensuring that our IT security policies and procedures are in compliance with industry standards and regulations. You will work closely with various departments to identify and mitigate security risks, develop and implement security strategies, and ensure the protection of our information assets.

The salary on offer for this position is between £90,000 and £110,000 per annum plus benefits.

Please note this role requires on-site working for the first 3 months before moving to a hybrid arrangement.

Key responsibilities

• Develop and maintain IT security policies and procedures.
• Conduct regular risk assessments to identify potential security threats and vulnerabilities and recommend appropriate mitigation strategies. Internal and within the supply chain.
• Monitor and audit IT systems and processes to ensure ongoing compliance with internal policies and external regulations.
• Develop and deliver training programs to educate employees about IT security policies, procedures, and best practices.
• Collaborate with internal and external stakeholders, including auditors, regulators, and business units, to ensure comprehensive compliance coverage.
• Prepare and present regular reports on IT security compliance status, risks, and remediation efforts to senior management and the board.
• Provide day-to-day leadership and support to three direct reports, helping to develop their skills and ensure consistent delivery across Security Compliance workstreams. Enable the growth of individuals through effective performance management.
• Support in critical response.

Critical Skills for Success

• Extensive experience in IT security, compliance, or related roles, must have worked within a leadership position previously.
• Broad understanding of IT security for a FTSE 100
• Strong understanding of regulatory requirements and industry standards (e.g., GDPR, ISO 27001, NIST).
• Excellent analytical and problem-solving skills.
• Proven ability to lead and manage cross-functional teams.
• Strong communication and presentation skills.
• Ability to handle sensitive information with confidentiality and integrity.