Information Security Manager

Holland & Barrett; City Of London; On-site; GBP 125,000 - 150,000; Full time

Job summary

A leading health and wellness retailer in London is seeking an experienced Information Security Manager. The role involves developing an Information Security Management System in accordance with business goals and ISO standards. Ideal candidates will have extensive experience and relevant certifications in information security, alongside strong leadership skills. This position offers competitive benefits and a commitment to employee wellbeing.

Benefits

Pension company contribution = 3%

Incentive scheme up to 10% of annual salary

33 Days Holiday per year

Private Medical Care

Learning and Development opportunity

Career progression

Refer and Earn Scheme

25% discount on products

Free 24/7 Confidential Advice

Onsite Gym

Qualifications

• Extensive experience in information security, with at least 4 years in a leadership or management role.
• Strong understanding of security governance principles and frameworks.
• Demonstrated expertise in risk management methodologies.

Responsibilities

• Develop and implement an ISMS aligned with business goals and ISO27001 standards.
• Establish and maintain an effective information security governance framework.
• Lead identification, assessment, and prioritization of information security risks.

Skills

Information Security Management

Risk Management

Vendor Management

Communication Skills

Leadership

Education

Relevant certifications (e.g., CISSP, CISM, CISA)

Job description

Job title:

Information Security Manager

Company

Holland & Barrett

Job description

About the Role:

Are you passionate about safeguarding sensitive information and ensuring the security of digital assets? Holland & Barrett, a leading health and wellness retailer, is seeking a dynamic and experienced Information Security Manager to join our team.

Responsibilities:

Information Security Management System (ISMS):

• Develop, implement, and continuously refine an ISMS aligned with business goals and ISO27001 standards.
• Play a pivotal role in the ISO27001 roadmap, ensuring adherence to industry best practices.

Security Governance:

• Establish and maintain an effective information security governance framework aligned with ISO27001.
• Ensure security strategies align with business objectives and compliance requirements.

Security Policies and Procedures:

• Develop, enforce, and communicate information security policies, standards, procedures, and guidelines.
• Drive awareness and understanding of security policies throughout the organization.

Security Awareness:

• Foster a culture of security awareness among employees.
• Provide information security training and awareness programs to empower employees in safeguarding company assets.

Risk Management:

• Lead identification, assessment, and prioritization of information security risks.
• Implement controls to mitigate risks effectively, including those in the supply chain.

Data Loss:

• Develop, implement, and manage Data Loss Prevention (DLP) strategies and controls.
• Collaborate with cross-functional teams to integrate DLP measures into existing and future systems.

Security Audits and Assessments:

• Coordinate and participate in security audits, assessments, and compliance checks for ISO27001 certification.
• Collaborate with internal and external auditors to ensure a robust security framework.

Vendor Security:

• Assess and monitor the security practices of third-party vendors and partners.
• Ensure adherence to established security standards.

Requirements:

Certifications: Relevant certifications (e.g., CISSP, CISM, CISA) highly advantageous.

Experience: Extensive experience in information security, with at least 4 years in a leadership or management role within a complex organization.

Governance: Strong understanding of security governance principles and frameworks, including NIST and ISO27001.

Risk Management: Demonstrated expertise in risk management methodologies and practices.

Vendor Management: Experience in assessing and monitoring the security practices of third-party vendors and partners.

Communication: Excellent communication and interpersonal skills, with the ability to convey complex security concepts to diverse audiences.

Leadership: Exceptional leadership skills, with a track record of building and leading high-performing information security teams.

Innovation: Forward-thinking mindset, committed to staying updated on emerging security trends and technologies.

If you are a dynamic Information Security professional ready to make a significant impact, apply now and be part of our commitment to ensuring the highest standards of information security at Holland & Barrett.

Holland & Barrett is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.

What we offer:

• Pension company contribution = 3%
• Incentive scheme up to 10% of annual salary, based on company performance.
• Your wellbeing is paramount so you can get away and take 33 Days Holiday per year.
• Private Medical Care (Self after 1 year)
• Learning and Development opportunity with Holland & Barrett is a great base for career development long term.
• Career progression.
• Refer and Earn Scheme – as we’re growing you can earn money by referring people to join us from your network.
• Epic Extras gives you access to exclusive benefits, free advice and savings from a range of retailers and providers.
• Stay healthy with Discounted Products – from day one you’ll get a 25% discount (on top of other promotions) when you shop at H&B on anything that you buy.
• We all need a little help sometimes, so we offer Free 24/7 Confidential Advice & Colleague Welfare.
• Mental Health First Aiders – we have lots of qualified Mental Health First Aiders because its all about your health & wellbeing.
• Stay active in the Onsite Gym at our Nuneaton Hub!
• We have colleague Reward and Recognition Schemes, so your hard work and loyalty won’t go unnoticed.
• And many more!

We’re passionate about helping every colleague thrive across all dimensions of wellbeing, and we’re committed to having a diverse and inclusive workplace. In line with our EPIC values (Expertise, Pioneering, Inclusive, Caring), we embrace and actively celebrate all our colleagues unique and varying experiences, backgrounds, identities and cultures – I am me, we are H&B.

Expected salary

Location

London

Job date

Thu, 25 Jan 2024 08:58:45 GMT

To help us track our recruitment effort, please indicate in your email/cover letter where (tendersglobal.net) you saw this job posting.