Job Description

Our client, a FTSE 100 global Entertainment business, is looking to hire an experienced and strategic Director of Information Security with a strong focus on delivering Data Security and Privacy programs.

The successful candidate will be responsible for developing and implementing a comprehensive data security and privacy program, ensuring the protection of sensitive information and compliance with relevant UK and EU regulations.

You will collaborate with cross-functional teams to assess risks, implement security measures, and drive a culture of security awareness within the organisation.

Responsibilities:

Develop and lead the overall data security strategy, aligning it with the UK and EU data protection laws and regulations. Establish and maintain a road-map for continuous improvement in data security measures. Ensure compliance with GDPR and other UK data protection laws. Collaborate with legal and compliance teams to interpret and implement privacy requirements. Conduct regular risk assessments to identify potential vulnerabilities and threats to data security. Implement effective risk mitigation strategies and measures to safeguard sensitive information. Develop, update, and enforce data security policies, procedures, and standards in line with UK and EU regulations. Communicate and train employees on security policies and best practices. Liaise with the incident response team to address and manage data security incidents. Develop and maintain an incident response plan, ensuring its effectiveness and efficiency. Stay abreast of emerging technologies and trends in data security. Evaluate and implement security technologies that enhance data protection and privacy. Assess and manage the security posture of third-party vendors and partners, ensuring compliance with UK and EU regulations. Collaborate with procurement to ensure vendors meet security and privacy requirements. Foster a security-conscious culture across the organisation.

Experience:

Bachelor's or Master's degree in Information Security, Computer Science, or a related field. Proven experience in a leadership role focused on information security. Experienced in delivering complex data security and privacy programs, and Big Data Security programs. In-depth knowledge of GDPR and other relevant data protection laws and regulations. Industry certifications such as CISSP, CISM, or CDPSE are highly desirable. Strong analytical and problem-solving skills. Excellent communication and interpersonal skills, with the ability to communicate complex security concepts to non-technical stakeholders.

The Package:

Base Salary : £150,000 - £180,000 Bonus Full Company Benefits : Pension, Private Medical, Life Assurance, etc Full Remote Working

This position will be offered as a 12 month fixed term contract with a view to extension.

Applicants MUST be currently living in the UK and hold a valid British Passport. Unfortunately, applicants from outside of the UK will not be considered.