Description
Information Protection Manager - Contract
Square One are looking for an Information Protection Manager to come on board for an initial 3 month contract in Leeds.
This is an initial 3 month contract paying market rates.
The Role:
The Information Protection Manager is responsible for the day to day execution and monitoring of the Information Protection tool. This role supports the operation of the clients Information Protection tools including collaboration with external vendors and internal stakeholders, including Legal Compliance, Information Governance, Information Security, IT Security, Information Technology and business users in order to meet the information protection needs of the company. This role is also responsible for maintaining the clients' ongoing compliance with PCI-DSS.
Responsibilities:
Develop and apply the appropriate strategy to meet the information protection requirements of the business.
Influence senior stakeholders about the importance of information protection and data loss prevention controls including the definition and prioritisation of information protection needs.
Expand the scope and depth of the information protection and data loss prevention programme globally.
Accountable for the results of the Information Protection strategy and associated controls to protect critical data assets and prevent/detect data loss.
Create information protection policies in line with corporate mandates and regulatory requirements.
Design and enhance Information Protection processes and workflows to support the ability of the business to efficiently and effectively identify, protect, detect, respond to and recover from potential information/data breaches.
Design employee and partner communication strategies and identify awareness training opportunities.
Oversee PCI Compliance activity across the clients', including completion of gap assessments against current PCI requirements as well as the identification and delivery of appropriate remediation activity
Creation and delivery of PCI Compliance reports as requested from time to time by the clients acquirers.
Experience:
Proven experience with designing, implementing, managing and operating data loss prevention, data classification/labelling and rights management technologies - specifically those provided by Microsoft, Intel/McAfee and GroundLabs.
Experience in deploying and operating Cloud Access Security Broker, Database Access Monitoring and Rights Management technologies.
Proven experience of resource management (direct and indirect reports).
Good knowledge of data protection and global privacy regulations.
Working knowledge of PCI v3.2.
Ability to deal with a broad range of stakeholders at all levels, both internal and external, in a confident and assured manner.
Excellent communication skills both written and verbal.
Knowledge of ISO 27000 series of standards, NIST Cybersecurity Framework, CIS Critical Security Controls;
Experience of working within a complex and dynamic business environment.
High degree of professionalism and personal integrity.
Ability to work with a high degree of independence and exercise good judgement.
Excellent documentation skills (process, control, policy, and risk documentation).
Ability to learn quickly and apply risk/control considerations, mindful of business process impact.
This is an initial 3 month contract paying market rates.
Information Protection Manager - Contract
Notwithstanding any guidelines given to years of experience sought, we will consider candidates from outside this range if they can demonstrate the necessary competencies.
Square One is acting as both an employment agency and an employment business, and is an equal opportunities recruitment business.
Square One embraces diversity and will treat everyone equally: Please see our website for our full diversity statement.