Information Systems and Security Compliance Manager

Drax Group; Selby; On-site; GBP 60,000 - 90,000; Full time

Benefits offered by this job

Discretionary bonus

Private healthcare

SAYE scheme

Personal accident cover

Group pension up to 10%

Holiday 25 days + bank holidays

Professional body membership reimburse

Job summary

Drax Group is seeking an Information Systems & Security Compliance Manager to lead governance, risk and compliance across IS&S. This permanent, full-time role in Selby offers a hybrid pattern and the chance to drive security regulatory alignment with SEC, PCI DSS and ISO27001.

You will partner with stakeholders, support audits and shape the compliance roadmap to reduce risk. Reporting to the Head of InfoSec Governance, Risk & Compliance, you’ll oversee regulatory obligations, develop

Qualifications

• Proven experience in information security compliance, governance and risk management.
• Understanding of regulatory frameworks such as SEC, PCI DSS, ISO27001, and NIS Regulations.
• Experience engaging with auditors, regulators and business stakeholders.
• Ability to translate complex security compliance requirements for technical and non-technical audiences.
• CISSP, CISA, CISM or equivalent certification preferred.

Responsibilities

• Lead IS&S compliance governance activities, reviews and stakeholder engagement.
• Oversee IS&S compliance against regulatory and contractual obligations including SEC, PCI DSS, ISO27001 and NIS Regulations.
• Develop IS&S compliance reporting, schedules and improvement plans.
• Support audits, assurance activities and security input into projects.

Skills

Information security compliance

Governance and risk management

Stakeholder engagement

Audits & regulatory liaison

Regulatory knowledge (SEC, PCI DSS,ISO

Job description

Information Systems & Security Compliance Manager

Permanent, Full-time

Location: Selby, hybrid work pattern

Closing Date: 17th August

We're looking for an experienced Information Systems & Security Compliance Manager to play a critical role in ensuring Drax meets its technology and security compliance obligations across a complex and evolving regulatory landscape.

Working within our Information Security, Governance, Risk & Compliance function, you'll help shape a robust compliance culture, influence senior stakeholders, and support the delivery of our security strategy.

This role represents a great opportunity to be part of a collaborative and evolving security function!

Who we are

We’re not just talking about making a difference, we’re making it happen. We generate dispatchable, renewable power and create stable energy in an uncertain world. Building on our proud heritage, we have ambition to become the global leader in sustainable biomass and carbon removals.

You’ll be joining our teams of practical doers, future thinkers and business champions. We’re enabling a zero carbon, lower cost energy future for all, and working hard to decarbonise the planet for generations to come.

About the role

Reporting to the Head of InfoSec Governance, Risk and Compliance, you’ll act as the central point of contact for Information Systems and Security (IS&S) compliance across the Group.

• Lead IS&S compliance governance activities, reviews and stakeholder engagement.
• Oversee IS&S compliance against regulatory and contractual obligations including Smart Energy Code (SEC), PCI DSS, ISO27001 and NIS Regulations.
• Develop IS&S compliance reporting, schedules and improvement plans.
• Support audits, assurance activities and security input into projects.

Who we’re looking for

To be successful in this role you’ll ideally have…

• Proven experience in information security compliance, governance and risk management.
• An understanding of regulatory regulations such as the Smart Energy Code (SEC), PCI DSS, 2701 and NIS Regulation.
• Experience engaging with auditors, regulators and business stakeholders
• Ability to translate complex security compliance requirements for both technical and non-technical audiences.
• Ideally be certified in either CISSP, CISA, CISM or equivalent.

Rewards and benefits

As you help us to shape the future, we’ve shaped our rewards and benefits to help you thrive and support your lifestyle. If successful in this role, you’ll get:

• A discretionary bonus depending on company performance
• Private Healthcare
• SAYE (Sharesave): discretionary scheme from time to time
• Personal accident cover
• Group personal pension plan where we’ll contribute up to 10%
• Holiday - 25 days plus bank holidays
• Reimbursement of the cost of your annual membership of one relevant and appropriate professional body

We’re committed to making a tangible impact on the climate challenge we all face. Drax is where your individual purpose can work alongside your career drive. We work as part of a team that shares a passion for doing what’s right for the future. With Drax you can shape your career and a future for generations to come.

Together, we make it happen.

At Drax, we’re committed to fostering an environment where everyone feels valued and respected, regardless of their role. To make this a reality, we actively work to better represent the communities we operate in, foster inclusion, and establish fair processes. Through these actions, we build the trust needed for all colleagues at Drax to contribute their perspectives and talents, no matter their background.