Information Security Manager, Made.com

• An ability to build relationships and communicate effectively with technical, commercial and customer stakeholders
• You are well-organised, detail-oriented and able to handle and effectively prioritise multiple tasks under pressure
• Articulate in both verbal and written communication with the ability to make measured arguments
• Like us, you’re enthusiastic, driven, and motivated by constant improvement
• Extensive proven experience in a Security position within a cyber-threat environment
• IT security technologies experience (vulnerability management, security information and event management, intrusion detection, access auditing etc.)
• Experience managing complex projects
• Experience of working within a PCI-DSS environment
• Experience of the GDPR and overseeing a privacy management process

Desirable

• As the Information Security Manager, you will join an innovative and experienced Technology team at MADE.COM
• You will be working within the Technology & Security Services team and closely with Corporate IT, Engineering, Legal, and Finance teams as well as interacting with stakeholders across the business
• By applying your experience and organisational skills you will bring best practice and rigour to our Information Security, Governance, Risk and Compliance programmes
• Oversee our Information Security Management System (ISMS), including helping to manage Risk and Asset management processes, Corrective Action Plans, and reporting overall ISMS performance against agreed metrics to senior management
• Manage the privacy management process providing guidance on Data Processing Agreement’s with third parties, Data Privacy Policy updates, and data retention policies
• Assist in delivering MADE.com’s Information Security strategy
• Develop and review MADE.com’s threat models and manage changes to the business to counter exploitation
• Deliver and augment our existing security awareness training programme for internal staff and support the on-going Security and Privacy education needs of the business
• Take ownership for on-going compliance programmes, such as continued compliance to the General Data Protection Regulation (GDPR), Payment Card Industry Data Security Standard (PCI/DSS), and our internal security controls
• Act and as a member of a group of incident managers, measure the effectiveness of the incident management process and adapt the policies and produces accordingly
• Assist with process improvement, data capture and output review during company responses to Data Subject Access Requests
• Further develop and maintain our security policies and procedures to effectively address an evolving threat landscape
• Support the continuous monitoring and auditing of our corporate and production systems for vulnerabilities and non-conformities
• Manage the company Asset Register, including working with stakeholders across the business, to ensure new assets are captured and periodic reviews are taking place
• Assist in third party audits of the MADE.com supplier and partnership ecosystem
• Act as a subject matter expert within MADE.com to help guide and consult stakeholders to ensure continuous security maturity and improvement of our security posture