Security & Compliance Officer

Eurofins USA; Warrington; Hybrid; GBP 35,000 - 45,000; Full time

Job summary

A leading forensic services provider is seeking a Quality and Compliance Officer in Warrington. This role involves conducting internal audits, facilitating external audits, and managing security incidents. The ideal candidate has experience with Information Security Management Systems, knowledge of ISO27001, and excellent communication skills. Competitive salary and a flexible benefits package are offered.

Benefits

Life Assurance (3 times annual salary)

Scottish Widows Company Pension Plan

25 days annual leave plus bank holidays

Qualifications

• Experience of working within an Information Security Management System (ISMS).
• Ability to handle complex and varied workloads with prioritisation skills.
• Good knowledge of security standards, e.g., ISO27001 and Data Protection Act.

Responsibilities

• Undertake internal audits for accreditation compliance.
• Facilitate external audits and visits regarding security matters.
• Lead investigations of security and data protection incidents.

Skills

Information Security Management

Complex workload management

Computer literacy

Security standards knowledge

Job description

Overview

Eurofins Forensic Services (EFS) is the largest forensic service provider in the UK and Europe. We are part of Eurofins Scientific, an international life sciences company delivering analytical testing services to clients across multiple industries to make life and our environment safer, healthier and more sustainable. Eurofins laboratories work with the biggest companies to ensure products are safe, ingredients are authentic, and labelling is accurate. Eurofins is committed to protecting the environment and promoting diversity, equity, and inclusion across the network.

In over 35 years, Eurofins has grown from one laboratory to a global network with a portfolio of over 200,000 analytical methods. In 2022, Eurofins generated total revenues of EUR 6.7 billion.

This is an exciting opportunity to join the Quality and Compliance team to engage on all physical and information security matters and to provide support to the Security and Compliance Manager. The role offers flexibility to work remotely. Travel to various CFS and EFS sites will be necessary, so applicants should hold a valid UK driving licence or be willing to travel by alternative means. The successful candidate will also provide support to the Data Protection Officer on all matters concerning Data Protection (GDPR/DPA).

Note: Security clearance is required for this role. Applicants should be aware that five years of continuous UK residency are typically required to obtain clearance, which is conducted by a third party to police vetting standards (NPPV/3 and SC). Further information on the security clearance process can be found through police vetting resources. In addition, successful applicants will be required to undertake drug and alcohol testing prior to commencing employment.

Key Responsibilities and Accountabilities

• Undertake internal audits to maintain and improve accreditation / certification to identified standards including but not exclusive to ISO27001, Cyber Essentials Plus, ISO17025 and the Forensic Science Regulator Code of Practice.
• Facilitate external stakeholder audits and visits in relation to security, data protection and information security.
• Lead investigations of security and data protection incidents, identifying root cause and implementing preventative and corrective actions.
• Promote a positive security culture.
• Support the implementation of physical / data security and data protection processes and standards.
• Undertake all administrative duties and general functions of the Quality and Compliance team.
• Support the development and delivery of security and data protection training and communication programmes.
• Input, maintain and collate all relevant data to support Quality and Compliance functionality.
• Communicate, escalate and inform relevant parties of improvement opportunities.
• Ensure security and data protection processes are followed.
• Provide support to the wider Quality and Compliance team as required (Quality audits and investigations).
• Undertake any other identified duties as required.

Qualifications

• Experience of working within an Information Security Management System (ISMS).
• Ability to handle complex and varied workloads with prioritisation skills.
• Computer literacy to a competent level.
• Aware of the Forensic Science Regulator Code of Practice.
• Good knowledge of security standards e.g. ISO27001 and Data Protection Act 2018/ GDPR.

Additional Competencies

• Competency in conducting audits within an ISO27001, Forensic Science Regulators Code of Practice and Data Protection capacity.
• Awareness of ISO17025.
• Knowledge of root cause analysis tools e.g. 5Why or demonstrable investigative experience.
• Understanding of how to undertake and review Privacy Impact Assessments (PIA).

Person Specification

• Work collaboratively as part of the Quality and Compliance team.
• Attention to detail with the ability to make informed decisions from audit or investigation outcomes.
• A good communicator who can advocate and implement best security and data protection practice.

Additional Information

In return for your hard work and loyal service, we offer a competitive salary and a flexible benefits package, including cycle to work, volunteering days, and holiday options. Benefits include:

• Life Assurance (3 times annual salary)
• Scottish Widows Company Pension Plan
• 25 days annual leave plus bank holidays (increasing to 30)
• Employee recognition schemes and service awards
• Employee tech scheme
• Discount vouchers and wellness perks
• Perkbox access for cost savings
• Learning and study support
• Employee Assistance Programme
• Health Cash Plan
• Enhanced sick, maternity and paternity pay
• Refer a friend scheme
• Mental health support and wellbeing resources
• Free on-site car parking