Impress employers and recruiters.
Choose from hundreds of resume examples.

Impress employers and recruiters.
Choose from hundreds of resume examples.

Target Resume Now

About the Role

The Information Security and Compliance Manager will develop and oversee control systems to prevent and address data security and privacy breaches. This role involves evaluating and improving control efficiency, collaborating with IT and Legal departments to monitor and enforce compliance, and providing guidance on information security best practices.

Responsibilities

• Coordinate the development of best practice policies and standards related to IT security and data processing.
• Ensure policies and standards are regularly reviewed and updated to align with regulatory and control requirements.
• Be accountable for technical security controls including EDR, SIEM, DLP, SSE/SWG, CSPM, vulnerability management, identity security, and endpoint compliance.
• Partner with and challenge Technology Operations on secure design, implementation, and operational support of workplace, identity, and endpoint technologies.
• Define and maintain build standards for Windows, MacOS, Android, and iOS devices.
• Define security and compliance standards for cloud hosting environments, including AWS and GCP.
• Oversee penetration testing, bug bounty programs, and red team exercises.
• Investigate security events and contain incidents in a timely manner.
• Manage and oversee technology risk management activities.
• Identify areas of non-compliance or weak compliance and drive improvement.
• Develop and implement relevant security and compliance reporting to management and risk committees.
• Develop and manage an information security risk register.
• Coordinate information security internal audits and participate in external audits.
• Collaborate with the IT department, the Legal department, and other stakeholders to monitor and enforce compliance standards and regulations.
• Take ownership of vendor assessments, third-party risk assessments, and supply chain vulnerabilities.
• Develop and lead information security awareness and training initiatives, including phishing exercises and compliance training.
• Maintain an up-to-date understanding of emerging trends in information security risks, and new techniques and trends.

Requirements

• Experience in managing Cyber Security and Compliance positioning for an enterprise organization.
• Practical experience delivering hands-on security improvements.
• An understanding of relevant security and regulations (e.g., GDPR, CCPA, ISO27001, PCI-DSS).
• Customer-focused approach.
• Effective communicator with ability to adapt style for intended audience.
• Capable of managing the relationship with 3rd party service providers.
• Highly organized and able to prioritize workload effectively.
• Pro-active and able to work off own initiative.
• Able to influence and communicate own point of view.
• Creative and unorthodox thinker, able to push projects forward in an unstructured environment.
• Methodical, logical, organized, and calm under pressure.
• Excellent English written & verbal skills.

Skills

• Information Security
• Compliance
• Data Security
• Data Privacy
• IT Security
• GDPR
• CCPA
• ISO27001
• PCI-DSS
• EDR
• SIEM
• DLP
• SSE/SWG
• CSPM
• Vulnerability Management
• Identity Security
• Endpoint Compliance
• Cloud Security (AWS, GCP)
• Penetration Testing
• Bug Bounty Programs
• Red Team Exercises
• Incident Response
• Risk Management
• Audit
• Vendor Assessment
• Third-Party Risk Assessment
• Supply Chain Risk Management
• Security Awareness Training
• Phishing Exercises

About the Company

• Founded by makeup artist Charlotte Tilbury MBE in 2013, Charlotte Tilbury Beauty has revolutionised the global beauty industry.
• The company offers an easy-to-use, easy-to-choose, easy-to-gift range of makeup.
• Charlotte Tilbury Beauty has experienced exceptional growth over the last 10 years, becoming a global sensation across 50 markets.
• The company has over 2,300 employees globally.
• Charlotte Tilbury Beauty is a global business delivering market-leading growth and innovative retail and product launches.
• The company utilizes industry-leading tech and fosters an internal culture of embracing challenges, disruptive thinking, winning together, and sharing the magic.
• The company is looking for extraordinary talent to join their success and drive ambitious goals.