Senior Security GRC Specialist

Votresommelier; London; On-site; GBP 60,000 - 90,000; Full time

Job summary

A leading company in fashion technology seeks a Senior Security GRC Specialist to join their Cyber Security team. This role involves managing compliance projects, enhancing security policies, and providing expertise in risk management. Ideal candidates will have relevant experience, certifications, and strong analytical skills.

Benefits

Employee discount

Personal development opportunities

Employee sample sales

Access to LinkedIn Learning

25 days paid leave + a celebration day

Discretionary bonus

Private medical care

Flexible benefits allowance

Qualifications

• Experience with standards like ISO 27001, PCI DSS, NIST CSF.
• Knowledge of data privacy laws (DPA, GDPR).
• Broad understanding of network technologies, especially cloud.

Responsibilities

• Managing and maintaining ASOS compliance projects, including coordinating audit activities.
• Assisting in maintaining the CISO's security risk registers and conducting risk assessments/workshops.
• Supporting security assessments of third-party suppliers.

Skills

Security competency

Organizational skills

Analytical skills

Communication skills

Education

Degree or industry certifications (e.g., CISSP, CISM, CISA, CRISC)

Job description

Join to apply for the Senior Security GRC Specialist role at Votre Sommelier.

Get AI-powered advice on this job and more exclusive features.

An exciting opportunity has arisen for a Senior Security GRC Specialist to join the ASOS Governance, Risk, and Compliance (GRC) team in Cyber Security.

Reporting to the Security Governance, Risk, and Compliance Manager, this role will assist in developing, enhancing, and executing ASOS's information security risk and compliance functions. Responsibilities include maintaining PCI DSS compliance, updating security policies and standards, and managing third-party supplier risks. The role also offers subject matter expertise and support on security risk management, requiring a proactive approach in a dynamic security landscape.

You will operate at multiple levels: collaborating within the GRC team, supporting the wider Security team, and assisting other ASOS business areas with their risk and compliance needs.

Key Responsibilities

• Managing and maintaining ASOS compliance projects, including coordinating audit activities.
• Assisting in maintaining the CISO's security risk registers and conducting risk assessments/workshops.
• Supporting security assessments of third-party suppliers via the ASOS risk management platform.
• Tracking and managing corrective actions for audit findings, standards exceptions, and control deficiencies.
• Supporting other security teams and business units with risk and compliance requirements.
• Authors and maintains ASOS security policies and standards.

What Success Looks Like

• Being an integral part of the GRC team to ensure smooth operations.
• Building effective relationships across business areas.
• Mentoring and guiding junior GRC team members.

At ASOS, we blend fashion with technology and foster an environment where you can be your authentic self. Our 'Fashion with Integrity' strategy promotes diversity, equity, and inclusion, encouraging everyone to bring their best selves to work.

The ideal candidate will demonstrate security competency through relevant experience, a degree, or industry certifications (e.g., CISSP, CISM, CISA, CRISC). Experience with standards like ISO 27001, PCI DSS, NIST CSF, and knowledge of data privacy laws (DPA, GDPR) are essential. A broad understanding of network technologies, especially cloud, and strong organizational, analytical, and communication skills are required.

Benefits

• Employee discount
• Personal development opportunities
• Employee sample sales
• Access to LinkedIn Learning
• 25 days paid leave + a celebration day
• Discretionary bonus
• Private medical care
• Flexible benefits allowance