Jobs in Poole, United States

Title: Manager, Information Security, Governance, Risk and Compliance

Location: Remote, UK

About PSI

We are PSI Services. We power world-leading tests, delivered with trusted science and the best test-taker experience. PSI supports test-takers in pursuing their dreams and gaining important certifications. Our purpose is to empower people to achieve their dreams by providing the best workforce solutions through technology and science.

We are looking for top talent to join our PSI team. We foster a creative, supportive, and inclusive culture where employees can be their authentic selves and utilize their talents.

At PSI, promoting diversity, equity, and inclusion is fundamental to our success and is embedded throughout our employee lifecycle.

About the Role

The Manager of Information Security, Governance, Risk and Compliance oversees activities related to quality, environment, risk, data security, privacy, and compliance. The goal is to ensure the organization complies with ISO, PCI, and other industry standards, providing assurances to stakeholders about data security and privacy.

This is a full-time, permanent managerial role reporting to the Director of Information Security, Governance, Risk and Compliance. The position offers remote work with occasional travel for audits and meetings.

Role Responsibilities

• Design and deploy the security GRC framework
• Maintain an integrated security GRC framework across teams
• Manage security policies, standards, procedures, and related issues
• Ensure controls are effective and policies are up-to-date
• Meet client, regulatory, and internal requirements cost-effectively
• Automate and streamline security GRC processes
• Report security metrics to stakeholders at all levels
• Manage security assessments and engage with external consultants
• Build cross-disciplinary partnerships to align security with business objectives
• Oversee internal and external audits for certifications like ISO27001, ISO22301, ISO9001, ISO14001, SOC2 Type 2
• Develop and maintain risk management programs
• Educate staff on security threats, risks, and best practices
• Design operational reporting frameworks and analyze security trends
• Handle security violations and infractions
• Prepare plans for security reviews and compliance tasks