Security GRC Lead — ISO27001, GDPR, PCI

Formula 1; Biggin Hill; On-site; GBP 70,000 - 110,000; Full time

Benefits offered by this job

Private Healthcare scheme

Dental Care

4 x Grand Prix Paddock passes per sea-

Enhanced maternity/paternity leave

Staff shuttle service

Healthy snacks in the office

Canteen with breakfast and lunch

25 days annual leave

Bank Holiday days plus Christmas break

Staff discounts on F1 merchandise

Perkbox portal access

Job summary

Formula 1 is seeking an Information Security Officer to lead GRC initiatives within the IT department. You will drive governance, risk, and compliance programs, coordinating audits and reports for senior stakeholders.

You will define and mature the security control framework, manage data governance across discovery, storage, and disposal, and liaise with suppliers for security improvements.

Qualifications

• Experience leading information security GRC programs, including risk management activities.
• Vendor/third party audit and compliance management.
• Security compliance and regulatory requirements – ISO27001, PCI DSS, GDPR.

Responsibilities

• Lead in monitoring and managing compliance programs aligned to security frameworks and regulations such as ISO 27001, PCI DSS, GDPR.
• Define and grow F1’s Security Control Framework and maintain effective security controls across functions.
• Coordinate internal and external security audits/reviews through delivery, evidence gathering and reporting.
• Work with stakeholders to support F1’s data governance and security strategy across data discovery, processing, storage, classification, retention, and disposal.

Skills

GRC leadership

Risk management

Regulatory compliance

Audit management

Security policies

Education

CISSP / CISM

ISO27001 Lead/Lead Auditor

Tools

SIEM

DLP

CASB

Endpoint AV

Job description

Formula 1 is seeking an Information Security Officer to lead GRC initiatives within the IT department. You will drive governance, risk, and compliance programs, coordinating audits and reports for senior stakeholders.

You will define and mature the security control framework, manage data governance across discovery, storage, and disposal, and liaise with suppliers for security improvements.