Director of Cyber Security & Compliance

The Director of Cyber Security & Compliance will own and shape Global Guardian‘s cyber security capability across its UK operations. Working directly with the CIO, this individual will define and deliver a cyber security strategy aligned to the organisation’s wider technology and business objectives, leading security and compliance programmes, influencing engineering teams, managing strategic security partners and ensuring Global Guardian remains ahead of an evolving threat landscape.

• Define and continually evolve the organisation’s cyber security strategy by anticipating emerging threats, technologies and regulatory developments, ensuring Global Guardian remains ahead of an evolving risk landscape.
• Define the organisation’s cyber security roadmap by continuously assessing emerging threats, technologies and industry trends.
• Partner closely with software engineering teams to ensure security is embedded into platform architecture, development practices and cloud infrastructure from design through deployment.
• Influence executive stakeholders to ensure cyber security remains embedded within business strategy, product development and operational decision making.
• Partner with the CIO in managing cyber security vendor partnerships

• Instigate and maintain annual vendor risk assessments and acceptance criteria for all technology-related investments.
• Partner with engineering teams to ensure secure-by-design principles are embedded throughout platform architecture and software delivery.

• As the company DPA, advise business owners of the risks and solutions to ensure technology and business processes comply with legislation including GDPR, CCPA, Data Protection Act and other major Privacy compliance requirements as they evolve.
• Validate and continually improve enterprise-wide disaster recovery strategies and business continuity plans to ensure known and achievable recovery objectives.
• Own the organisation’s security assurance process, providing executive oversight of client due diligence, security audits and complex information security enquiries.
• Establish and embed effective cyber risk, governance and change management frameworks across the organisation.Provide strategic security leadership during major client bids and procurement activities, ensuring security requirements are understood, addressed and used as a competitive differentiator.
• Ensure Company is following compliance frameworks (eg, ISO 27001) and maintains current and future certifications

• Own the continual improvement of the organisation’s security architecture, controls and technical standards across all business entities.
• Define the cyber strategy for new and existing security platforms across all business entities.
• Own platform data flow and risk maps
• Act as the organisation’s cyber security leader, influencing technical and non-technical stakeholders whilst championing a culture of security across the business.
• Ensure Company security policies and procedures are being followed within the organisation

• Plan and manage the response to security breaches and other security incidents, including coordination and recovery efforts
• Lead response to any real or perceived breach internally and with external Cyber security partners

• enjoys operating with significant autonomy
• takes ownership without waiting for instruction
• is comfortable making informed decisions independently
• enjoys building rather than maintaining
• can balance strategic thinking with hands-on delivery
• naturally identifies problems before they become risks
• is trusted to represent cyber security across the organisation

• Company pension
• Cycle to work scheme
• Gym membership
• On-site parking
• Private medical insurance

• Cybersecurity: 5 years (required)
• Incident response: 5 years (preferred)
• Leadership: 2 years (preferred)

• United Kingdom (required)

Please send all applications to mstreet@globalguardian.com