Information & Tech GRC Lead - Cyber Risk & Training

DS Smith Plc; Greater London; On-site; GBP 90,000 - 120,000; Full time

Job summary

DS Smith plc is seeking an I&T Governance and Risk Lead to drive information security awareness, manage risk and coordinate cyber resilience across central and manufacturing site teams.

You will review security arrangements, support IT, procurement, legal and data protection, lead risk-based assurance, maintain ISO27001 related controls, and guide stakeholders on standards including ISO27001, NIST CSF, PCI DSS, NISD and NIS2.

Qualifications

• Experience with information security standards and frameworks such as ISO27001, NIST CSF, PCI DSS, NISD and NIS2.
• Proven analytical, problem-solving, planning, project delivery and supplier work packages management skills.
• Experience engaging across all levels of a company in relation to information and cyber security risks.

Responsibilities

• Engage with IT and business stakeholders on risk management and security awareness.
• Coordinate security questionnaires and supplier security reviews.
• Lead risk-based security assurance and manage IT risk register and reports.
• Provide training on information security and cyber resilience.

Skills

Security awareness

Risk management

Stakeholder engagement

Analytical thinking

Project delivery

Education

ISO27001 Lead

ISC2

CISM

CRISC

Tools

ISO27001

NIST CSF

PCI DSS

NISD

NIS2

Job description

DS Smith plc is seeking an I&T Governance and Risk Lead to drive information security awareness, manage risk and coordinate cyber resilience across central and manufacturing site teams.

You will review security arrangements, support IT, procurement, legal and data protection, lead risk-based assurance, maintain ISO27001 related controls, and guide stakeholders on standards including ISO27001, NIST CSF, PCI DSS, NISD and NIS2.