Strategic IS & Security Compliance Leader - Hybrid

Drax Group; Selby; Hybrid; GBP 60,000 - 90,000; Full time

Benefits offered by this job

Discretionary bonus

Private healthcare

SAYE scheme

Personal accident cover

Group pension up to 10%

Holiday 25 days + bank holidays

Professional body membership reimburse

Job summary

Drax Group is seeking an Information Systems & Security Compliance Manager to lead governance, risk and compliance across IS&S. This permanent, full-time role in Selby offers a hybrid pattern and the chance to drive security regulatory alignment with SEC, PCI DSS and ISO27001.

You will partner with stakeholders, support audits and shape the compliance roadmap to reduce risk. Reporting to the Head of InfoSec Governance, Risk & Compliance, you’ll oversee regulatory obligations, develop

Qualifications

• Proven experience in information security compliance, governance and risk management.
• Understanding of regulatory frameworks such as SEC, PCI DSS, ISO27001, and NIS Regulations.
• Experience engaging with auditors, regulators and business stakeholders.
• Ability to translate complex security compliance requirements for technical and non-technical audiences.
• CISSP, CISA, CISM or equivalent certification preferred.

Responsibilities

• Lead IS&S compliance governance activities, reviews and stakeholder engagement.
• Oversee IS&S compliance against regulatory and contractual obligations including SEC, PCI DSS, ISO27001 and NIS Regulations.
• Develop IS&S compliance reporting, schedules and improvement plans.
• Support audits, assurance activities and security input into projects.

Skills

Information security compliance

Governance and risk management

Stakeholder engagement

Audits & regulatory liaison

Regulatory knowledge (SEC, PCI DSS,ISO

Job description

Drax Group is seeking an Information Systems & Security Compliance Manager to lead governance, risk and compliance across IS&S. This permanent, full-time role in Selby offers a hybrid pattern and the chance to drive security regulatory alignment with SEC, PCI DSS and ISO27001.

You will partner with stakeholders, support audits and shape the compliance roadmap to reduce risk. Reporting to the Head of InfoSec Governance, Risk & Compliance, you’ll oversee regulatory obligations, develop