Security and Compliance Manager

Neve Jewels Group; Greater London; Hybrid; GBP 90,000 - 120,000; Full time

Benefits offered by this job

Hybrid working

Private healthcare

Flexible hours

Birthday leave

Perkbox discounts

Job summary

Neve Jewels Group is seeking a Security and Privacy leader to design and maintain the organisation's IT security and data protection framework. You will drive governance, risk management, and compliance across our digital and retail platforms, including e-commerce and in-store systems.

You will partner with tech and business teams to embed security by design, monitor SOC activities, and advise senior management on regulatory risks.

Qualifications

• Minimum 5+ years leading compliance and data protection programmes.
• You possess triple-lens capability: IT Security Manager, Compliance Lead, and DPO.
• You have strong ISO27001, PCI-DSS, and GDPR knowledge.

Responsibilities

• Design, implement, and maintain the IT security framework across the group.
• Lead audits, risk assessments, and governance for security and privacy.
• Oversee incident response, forensics, and disaster recovery planning.
• Advise on privacy by design and regulatory risk to executives.

Skills

Security leadership

Privacy management

ISO27001

PCI-DSS

GDPR

Threat intelligence

Incident response

Audit & compliance

Data protection

Tools

SIEM

Endpoint security

Cloud security (AWS)

Vulnerability scanning

Job description

Neve Jewels Group is a UK headquartered, digital-first jewellery company redefining modern luxury through made-to-order design, ethical craftsmanship, and global e-commerce across its brands: Diamonds Factory, Austen & Blake, and Sacet. Our values:

Celebrate the Moment: We honour life’s milestones by creating meaningful, joy-filled jewellery experiences.

Customer Centric Approach: Every decision starts with our customer, delivering personalised service at every step.

Earn Trust and Respect: We build trust through honesty, care, and respect in all relationships.

Experience Led Innovation: We blend tradition and innovation to enhance every jewellery experience.

Empathy for People/Planet: We act with compassion, sourcing ethically and operating sustainably.

Protecting our clients is as important as the quality of our diamonds. We’re looking for a security expert to lead the development and maintenance of our compliance framework. You’ll be the driving force behind our adherence to ISO27001, PCI-DSS, and GDPR, ensuring Neve Jewels remains a trusted leader in luxury retail. You’ll work hand-in-hand with our tech and business teams to embed security into our DNA, monitoring controls and providing the specialist advice needed to safeguard our digital and physical assets.

02 KEY RESPONSIBILITIES

• Security Architecture & Governance: Design, implement, maintain compliance and manage the Neve Jewels IT security framework, ensuring technical alignment with ISO27001, Cyber Essentials Plus, and PCI-DSS 4.0.
• Infrastructure Protection: Oversee the security of all corporate and boutique networks, including firewalls, VPNs, end-point protection, and cloud environments (AWS/SaaS).
• Vulnerability & Patch Management: Lead regular vulnerability scanning and penetration testing schedules; prioritise and oversee the remediation of technical weaknesses across all retail systems and POS terminals.
• Incident Response & Forensics: Act as the technical lead for all security incidents, managing the end-to-end response, from initial detection and containment to deep-dive forensic analysis and post-incident reporting.
• Identity & Access Management (IAM): Establish and enforce rigorous access controls and Multi-Factor Authentication (MFA) protocols to ensure only authorised personnel can access high-value client and financial data.
• Secure Software Development: Partner with the Digital/E-commerce teams to ensure "Security by Design" is integrated into the Neve Jewels website, mobile apps, and internal bespoke tools.
• Third-Party Technical Assurance: Conduct deep-dive technical security assessments of all IT vendors, cloud providers, and digital partners to ensure they meet our elite encryption and data-handling standards.
• Monitoring & Threat Intelligence: Manage Security Operations (SOC) activities, including SIEM monitoring and log analysis, to proactively hunt for emerging threats against the luxury retail sector.
• Disaster Recovery & Business Continuity: Lead the technical design and testing of IT disaster recovery plans, ensuring the business can remain operational and secure in the event of a system failure or cyber-attack.
• Technical Advisory: Provide expert security consultation on all new IT projects, hardware procurement, and boutique technology rollouts (e.g., smart mirrors, IoT, or advanced CCTV integration).

IT Compliance

• Audit Orchestration: Act as the primary lead for all internal and external IT audits; coordinate with department heads to gather evidence, manage auditor walkthroughs, and ensure zero "major non-conformities."
• Control Monitoring & Testing: Establish a continuous monitoring programme to test the effectiveness of IT controls (e.g., access reviews, backup logs, and encryption standards), providing regular "compliance health" reports to senior management.
• Policy Governance: Author and maintain the suite of IT policies and procedures (e.g., Acceptable Use, Incident Response, and Disaster Recovery), ensuring they are practical for a luxury retail environment and legally robust.
• Third-Party Risk Management (TPRM): Manage the IT compliance vetting process for all new vendors, ensuring high-value partners (from e-commerce platforms to cloud storage) sign and adhere to our security schedules.
• Remediation Tracking: Identify gaps in the technical landscape and work with the IT Infrastructure team to track and close out remediation plans, ensuring risks are downgraded within agreed SLAs.
• Asset & Identity Governance: Perform quarterly audits of user access rights and hardware inventories to ensure only authorised staff have access to Neve Jewels’ most sensitive financial and client data.
• Litigation & Discovery Support: Assist in technical investigations or Subject Access Requests (SARs) by ensuring data is archived and retrievable in a legally defensible manner.
• Compliance Training: Develop and deliver targeted training for the IT team on compliance obligations, ensuring every engineer understands their role in maintaining our certifications.

Data Protection

• Strategic Privacy Governance: Lead the design and maintenance of the Neve Jewels privacy framework, ensuring total alignment with GDPR and UK GDPR
• Privacy by Design & Impact: Orchestrate the Data Protection Impact Assessment (DPIA) process for all high-value retail initiatives, from luxury loyalty programmes to boutique surveillance, ensuring privacy is woven into every customer touchpoint.
• Rights & Breach Management: Oversee the end-to-end execution of Subject Access Requests (SARs) and data breach protocols, ensuring any risks to client confidentiality are contained and reported within the mandatory 72-hour window.

03 REQUIRED SKILLS & EXPERIENCE

You are a seasoned Security and Privacy professional with a minimum of 5+ years of experience leading compliance and data protection programmes. You possess a unique 'triple-lens' capability: the technical expertise of an IT Security Manager, the methodical rigour of a Compliance Lead, and the legal authority of a Data Protection Officer (DPO).

With a strong understanding of ISO27001, PCI-DSS, and GDPR, you build resilient, frameworks that protect high-value assets and client trust. You are a pragmatic advocate for 'Privacy by Design', ensuring that every digital innovation at Neve Jewels is built on a foundation of ironclad security.

An exceptional communicator and strategic thinker, you have the gravitas to advise the Board of Directors on regulatory risk and the technical fluency to partner with IT Engineering teams. You are a self-starter who thrives on independence, acts with absolute discretion, and stays at the cutting edge of emerging cyber threats and shifting privacy legislation

04 PREFERRED QUALIFICATIONS

• Retail Cyber Defence: Proven experience securing high-volume E-commerce platforms and Point of Sale (POS) systems against DDoS, SQL injections, and credential stuffing.
• PCI-DSS Mastery: Deep expertise in achieving and maintaining PCI-DSS Level 1 compliance for global credit card processing.
• Third-Party Risk Management: Experience auditing the security posture of Cloud providers, Nearshore development partners, and logistics vendors.
• Incident Response Leadership: A track record of leading "War Room" scenarios for data breaches or ransomware attacks.
• Security Architecture: Experience embedding "Security by Design" into Agile delivery cycles and DevOps pipelines
• Global Privacy Regulation: Expert knowledge of UK/EU GDPR, CCPA, and other regional privacy laws relevant to a global retail footprint.
• Privacy Impact Assessments (DPIA): Extensive experience conducting DPIAs for new retail technologies, such as AI-driven personalisation, biometrics, or loyalty apps.
• Data Subject Rights (DSARs): Proven ability to build scalable processes for handling high volumes of customer data requests and "Right to be Forgotten" queries.
• Regulatory Liaison: Experience acting as the primary point of contact for the Information Commissioner’s Office (ICO) or equivalent national authorities.
• Privacy Culture: A history of designing and delivering privacy training for diverse retail staff, from board-level executives to store-floor colleagues

05 WHY JOIN NEVE JEWELS

• Join a fast-growing business where your contributions matter and your ideas are valued
• Work in a supportive, transparent environment that encourages innovation and excellence
• Enjoy flexibility with 3 days a week in our vibrant Hatton Garden office and 2 days working from home
• Flexi hours - start your day between 8am and 10am, then finish between 4pm and 6pm
• Comprehensive Vitality private healthcare, offering access to high quality medical support and wellness benefit
• Enjoy your birthday, with an extra day of leave to celebrate
• Access to Perkbox for exclusive discounts, rewards, and wellbeing benefits to help you make the most of your work-life balance
• 25 days annual leave + bank holidays
• Enhanced maternity and paternity leave entitlements

Our Commitment to Diversity & Inclusion

At Neve Jewels Group we are committed to providing a work environment that supports, inspires, and respects all individuals. We do not discriminate on the basis of gender, race, colour, religion, age, disability, belief, sexual orientation, marital status, or is disadvantaged by conditions or requirements which cannot be shown.