Information Security & Assurance Manager

TN United Kingdom; Newcastle upon Tyne; Hybrid; GBP 50,000 - 80,000; Full time

Job summary

An established industry player is seeking an experienced Information Security & Assurance Manager to enhance the security of its franchise operations. This pivotal role involves overseeing risk management, ensuring compliance with industry standards, and engaging with key stakeholders to integrate security into digital products. The ideal candidate will possess a strong background in information security, risk frameworks, and data privacy, coupled with excellent communication skills. Join a collaborative team culture that values diversity and offers hybrid working arrangements, alongside a competitive benefits package to support your career growth.

Benefits

Hybrid working model

Free on-site office parking

Competitive benefits package

Career development opportunities

Collaborative team culture

Qualifications

• Experience in information security and risk management.
• Familiarity with compliance standards like PCI DSS and Cyber Essentials.
• Strong analytical and problem-solving skills.

Responsibilities

• Oversee risk and monitor the control framework within the division.
• Support compliance with security standards and manage incidents.
• Provide guidance on integrating risk management into products.

Skills

Information Security Management

Risk Management

Data Privacy

Compliance (PCI DSS, Cyber Essentials)

Analytical Skills

Communication Skills

Education

CISA Certification

ISO 27001 Certification

CISSP Certification

Tools

Risk Management Frameworks

Data Protection Act Knowledge

DevOps Knowledge

Job description

Social network you want to login/join with:

Information Security & Assurance Manager, Newcastle upon Tyne

col-narrow-left

Client:

LSL Property Services Plc

Location:

Newcastle upon Tyne, United Kingdom

Job Category:

Other

-

EU work permit required:

Yes

col-narrow-right

Job Reference:

2293b55cc70e

Job Views:

10

Posted:

28.04.2025

Expiry Date:

12.06.2025

col-wide

Job Description:

Job Locations

UK-Newcastle Upon Tyne

Job Profile

LSL is one of the largest providers of services to mortgage intermediaries and franchised estate agencies, providing valuation services to many of the UK’s largest mortgage lenders.

We are currently looking for an experienced Information Security & Assurance Manager to join our Franchising division in Newcastle upon Tyne and contribute to ensuring the security and privacy of our franchise operations.

As the Information Security Risk and Assurance Manager, you will serve as an independent control function overseeing risk and monitoring the first-line-of-defense control framework within the Franchising Division. Your role involves providing challenge on the effectiveness of controls, advising IT departments’ business leads, participating in multiple Risk and Information Security Steering Groups, and supporting the delivery of an effective information security and governance framework.

Main Accountabilities & Key Objectives:

1. Support the development, production, and management of an Information Security and Data Protection Risk framework.
2. Increase awareness of Information Security and Data Privacy throughout the business, assisting in achieving compliance targets.
3. Provide targeted assurance reviews to assess the suitability of the control framework within the first-line-of-defense.
4. Aid in the creation, distribution, and compliance of business Information Security and Data Privacy policies.

Key Responsibilities:

Key Stakeholder Engagement:

1. Provide practical support and guidance on integrating risk management, security, and privacy into digital software, products, and services.
2. Assist in managing information security-related incidents.
3. Offer guidance on procurement qualification reviews.
4. Support compliance with security standards such as PCI DSS / Cyber Essentials.

Risk & Governance:

1. Ensure effective maintenance of Information Security and Data Privacy Risks.
2. Stay informed about legislation, regulations, emerging threats, and best practices.
3. Develop and maintain Information Security Risk Registers.
4. Support governance frameworks aligned with industry standards and legal obligations.

Assurance:

1. Coordinate and manage scheduled external audits and Internal Audit activities.
2. Assist in due diligence activities for third-party suppliers.

Data Analysis and Reporting:

1. Provide advice to identify trends and prevent security incidents and data breaches.
2. Complete monthly reporting requirements directed by the Chief Risk & Compliance Officer.

Knowledge and Expertise:

1. Familiarity with security policies, standards, and risk frameworks.
2. Awareness of industry best practices.
3. Experience in assurance and relationship management.
4. Commercial acumen and report writing skills.
5. Analytical, decision-making, and problem-solving skills.

Experience, Qualifications, and Requirements:

1. Certification in CISA, ISO 27001, CISSP, CCSP, CSTAR, CISM, or PCI DSS (Desirable).
2. Understanding of PCI DSS, Cyber Essentials, and the Data Protection Act.
3. Knowledge of DevOps and DevSecOps.
4. Leadership skills and experience influencing senior management.
5. Experience assessing third-party infrastructure.
6. Excellent communication and influencing skills at all levels.
7. Awareness of relevant legislation and regulations.

In return we can offer you:

• Hybrid working with an office/home working model.
• Free on-site office parking.
• A competitive benefits package with the option to purchase enhanced and additional benefits to suit you.
• An opportunity to build on and develop a long-lasting rewarding career.
• A collaborative team working culture.

LSL is an equal opportunity employer, and we value diversity at our company. We do not discriminate on your background or needs, if you require any adjustments to make the recruitment process easier, please let us know.