Information Security Officer

Formula One Management Limited; Biggin Hill; On-site; GBP 70,000 - 90,000; Full time

Benefits offered by this job

Private Healthcare scheme

Dental Care

Staff shuttle to Biggin Hill

25 days annual leave

Training and development opportunities

Merchandise discounts

Job summary

Formula One Management Limited is seeking an Information Security Officer to join our IT department in Biggin Hill. Reporting to the Information Security Compliance Manager, you will deliver governance, risk and compliance across ISO27001, PCI DSS and GDPR, shaping policy and controls.

You will lead risk assessments, manage third-party audits, develop security policies, and monitor performance with dashboards for senior stakeholders.

Qualifications

• Experience leading information security GRC programs and risk management activities.
• Vendor/third party audit and compliance management.
• Security compliance and regulatory requirements – ISO27001, PCI DSS, GDPR.
• Incident Response, BC/DR planning and testing.

Responsibilities

• Lead monitoring of compliance programs aligned to security frameworks and regulations (ISO27001, PCI DSS, GDPR).
• Support the definition and growth of F1’s Security Control Framework.
• Design, assess and maintain effective security controls across business functions.
• Coordinate internal and external security audits and evidence gathering.

Skills

GRC programs

Risk management

Vendor audits

Security governance

Tools

ISO27001

PCI DSS

GDPR

Job description

Are you ready to make your mark in the world of Formula 1? At Formula 1, we are passionate about delivering the world’s greatest sports and entertainment spectacle leaving a positive legacy wherever we race. Innovation has always been at the heart of what we do ever since our first Grand Prix in 1950. Now, more than 75 years on, the sport remains a pioneer, developing technologies that have made a significant impact on society beyond the track. Everything you see on screen or at an event comes via our passionate and dedicated people. Whether its engineering, broadcast, legal, logistics, security, event management, commercial, media rights, marketing, or communications there is always a talented team working to maximise the potential of the sport.

Role Overview

We are looking for an Information Security Officer to join our IT department. Reporting into our Information Security Compliance Manager, this role will deliver F1’s Information Security Governance, Risk, and Compliance (GRC) projects and activities.

Main Duties and Responsibilities

• Lead in monitoring and managing compliance programs aligned to security frameworks and regulations such as ISO 27001, PCI DSS, GDPR.
• Where possible, recognising improvements and encouraging efficiencies and automation to controls, evidence gathering, and processes.
• Support the definition and growth of F1’s Security Control Framework.
• Taking a proactive approach to designing, assessing, and maintaining effective security controls across our various business functions.
• Provide expertise in risk management and the identification and assessment of security risks, ensuring they are appropriately reported on (through dashboards, reports, and workshops).
• Create, review, and maintain security policies, standards, and procedures; ensuring they are applied across relevant technology projects, systems, and services.
• Support in managing third party supplier security/compliance assessments, building relationships with key suppliers, and outlining steps for security improvements where appropriate.
• Coordinating internal and external security audits/reviews through delivery, evidence gathering, and reporting.
• Work with stakeholders to support F1’s data governance and security strategy across data discovery, processing, storage, classification, retention, and disposal.
• Support the implementation and maintenance of security controls for the protection of data.
• Define and monitor security GRC related performance metrics, communicating and presenting updates to Senior stakeholders.
• Support F1’s approach towards the use of Artificial Intelligence utilising tooling to ensure policies and procedures are adhered to.

What Are We Looking For?

Personal Qualities

• Enthusiastic and passionate about driving security improvements across the company / wider industry.
• Ability to cope under pressure and manage multiple important projects simultaneously.
• Ability to communicate with different audiences both technical and non-technical.
• Willingness to support F1 events / schedules across different time zones (on a rotational basis).

Experience Prior to the role

• Experience of successfully leading information security GRC focused programs, including risk management activities.
• Vendor/third party audit and compliance management.
• Security compliance and regulatory requirements – ISO27001, PCI DSS, GDPR.
• Incident Response, Business continuity / Disaster Recovery (BC/DR) planning and testing.
• Data governance & Data Loss Prevention (DLP) projects.
• Legal & regulatory frameworks relevant to information security, including planned future changes.

Some desirable experience that you may bring to the role

• Security architecture / engineering / operations experience.
• Understanding of security tools and technologies – AV, SIEM, DLP, CASB, etc.

Qualifications

• You will need to have current UK driving license in this role.
• Not essential to be successful in the role but you may also have the following qualifications: CISSP / CISM ISO27001 LI/LA.

Career Progression - Where Can You Go Next?

From this position, your next step could be into the role of Senior Information Security Officer.

Why join the force behind the sport?

Joining F1 means becoming part of a team that values innovation, collaboration and personal growth. We offer a dynamic work environment where ideas are heard, and employee contributions truly make an impact. We seek to recruit, develop, and retain the most talented people to play their role in accelerating the future of the sport.

Benefits

• Private Healthcare scheme
• Dental Care
• 4 x Grand Prix Paddock passes per season
• Enhanced maternity/paternity leave and other family planning policies
• A free staff shuttle service running to and from surrounding trains stations near to Biggin Hill
• Free healthy snacks in our offices
• Subsidised canteen in Biggin Hill, serving breakfast and lunch
• 25 days annual leave and 8 Bank Holiday days, plus a Christmas period closure
• Opportunities to develop and request training for your role via our in-house Learning and Development team
• Discount on F1 merchandise
• Discount at F1’s experiences including F1 Arcade and F1 Drive
• Perkbox benefit portal and more

Division: Here's how we roll

Formula 1® delivers the world’s greatest sports and entertainment spectacle with innovation, inclusivity, and sustainability at the heart of its future growth and value. As the global rights holders of this incredible sport our team delivers the 24-race calendar direct to our passionate fans around the globe. Everything you see on screen or at an event comes via our people at F1. Whether its engineering, broadcast, legal, logistics, security, event management, commercial, media rights, marketing, and communications there is always a driven and talented team working to maximise the potential of the sport. We are focused on delivering the best for our fans and partners while ensuring we do the right thing as a business, using the power of Formula 1 to make a positive contribution to the places we visit and to our own community. We work closely with stakeholders across the sport to leave a legacy of positive change both on and off the track.

At the same time, our commitment to diversity, equity and inclusion helps ensure that everyone feels welcome and has the opportunity to thrive.