IT GRC & Cyber Risk Lead — Security & Compliance

DS Smith; Greater London; On-site; GBP 60,000 - 80,000; Full time

Job summary

A global packaging solutions provider is seeking a Governance and Risk Lead to drive information security initiatives across their teams. The successful candidate will be responsible for delivering training, managing supplier security risk, and ensuring compliance with standards like ISO 27001. Strong analytical and problem-solving skills are essential, as well as experience with security frameworks. The role offers competitive salary and benefits, including a pension scheme and flexible work arrangements.

Benefits

Competitive salary

Company bonus

Pension scheme

Life assurance

Income protection

25 days holiday plus bank holidays

Electric Car / Bike to Work schemes

Qualifications

• Working knowledge of technology and security standards in manufacturing environments.
• Experience with security frameworks such as ISO27001, NIST CSF, PCI DSS.
• Experience in engaging across all company levels regarding security risks.

Responsibilities

• Drive information and cyber security awareness across teams.
• Deliver security awareness training including phishing simulations.
• Manage I&T and Security risks processes according to company policies.
• Provide IT advice on security standards like ISO27001 and NIST CSF.

Skills

Analytical skills

Problem-solving skills

Project delivery skills

Supplier management skills

Education

Professional certifications (ISO27001 lead, ISC2, CISM or CRISC)

Job description

A global packaging solutions provider is seeking a Governance and Risk Lead to drive information security initiatives across their teams. The successful candidate will be responsible for delivering training, managing supplier security risk, and ensuring compliance with standards like ISO 27001. Strong analytical and problem-solving skills are essential, as well as experience with security frameworks. The role offers competitive salary and benefits, including a pension scheme and flexible work arrangements.