Senior Manager - Data Security
This job is brought to you by Jobs/Redefined, the UK's leading over-50s age inclusive jobs board.
Our purpose is to make great financial decision making a breeze for everyone, and that purpose drives us every day.
It's why we're on a mission to create an automated quoting engine, with the simplest of experiences, wrapped in a brand everyone loves!
We change lives by making it simple to switch and save money and that's why good things happen when you meerkat.
We'd love you to be part of our journey.
As the Senior Manager for Data Security you will provide management, leadership and oversight to the Data security team to ensure data in transfer and at rest is managed in line with company policies and standards - preventing accidental and malicious data breaches, while encouraging and influencing the culture of data handling.
You'll liaise with senior stakeholders across the Group including executives to ensure data security remains a key enabler throughout projects and offer advice in forums such as security steering boards and risk committees.
Be responsible for contributing to the delivery of the successful accreditation against cyber security frameworks such as NIST or CIS20 by identifying key priority areas, managing those priorities and working within budgetary planning.
Be responsible for driving the security education strategy across the business.
Everyone is welcome.
We have a culture of creativity. We approach our work passionately, improve constantly and celebrate our wins at every turn. We are an inclusive workplace and our employees are comfortable bringing their authentic, whole selves to work. Everyone is welcome. Be you.
This means we're excited to hear from people with a range of skills, experiences and ideas. We don't expect you to tick all the boxes, but would love to hear what makes you great for this role.
Some of the great things you'll be doing:
• Data Security Monitoring & Prevention: Own and manage the detection, monitoring, and prevention of data in transfer (including email, web, SaaS, USB, and print) and data at rest (across databases and endpoints)
• Strategic Leadership: Provide strategic direction and steer for the Data Security and Data Loss Prevention (DLP) technical and cultural roadmap.
• Cross-functional Collaboration: Build and strengthen relationships across key business areas, including Data & Privacy, HR, Information Security, and Risk, to drive a unified security approach
• Cultural Change & Awareness: Champion a data-first mindset, influencing business practices and improving ways of working to embed security into the organization's culture.
• Innovation & Solution Development: Oversee the development and enhancement of the Data Security toolsets, extending security capabilities beyond the data and information security departments.
• Secure Content Distribution: Own and manage the secure content distribution platform (Kiteworks) to ensure safe and compliant data sharing.
• Supplier Management - Own the relationship with Netskope, Kiteworks and their associated resellers.
• Strategic Influence: Influence senior stakeholders, peers, and executives to maintain data security as a business priority.
• Budget & Resource Management: Plan and manage security priorities within approved budget limits, ensuring optimal resource allocation
• Governance & Risk Management: Participate in management and risk committees, providing operational and strategic direction for security projects and ongoing business-as-usual activities.
• Policy & Incident Management: Own and lead data security policies and their development. Oversee incident management and response for data security material breaches to the point of HR handover, conducting root cause analysis and implementing preventative measures
What we'd like to see from you:
• Proven experience in working with Cyber security/ Information Security/ Privacy frameworks such as NIST, ISO27001 or CIS20.
• InfoSec experience of working in an enterprise environment, particularly financial services
• Ability to document or present complex technical risks to a high standard, which are understandable for executives
• Proven information security experience in areas such as security awareness, due diligence, security controls and risk management
• Understanding of Privacy regulations and obligations.
There's something for everyone.
We're a place of opportunity. You'll have the tools and autonomy to drive your own career, supported by a team of amazingly talented people.
And then there's our benefits. For us, it's not just about a competitive salary and hybrid working, we care about what matters to you. From a generous holiday allowance and private healthcare to an electric car scheme and paid development, wellbeing and CSR days, we've pretty much got you covered!
#LI-HL1