Role Overview:
The Head of Security Risk & Compliance is the senior security specialist in RWS and is responsible for overseeing the effectiveness of the Company’s Information Security Management System (ISMS) to ensure its effectiveness and compliance with statutory, regulatory and customer requirements in addition to those of ISO27001 and SOC2 where appropriate. This involves ensuring the maintenance and development of RWS’ ISMS and security related accreditations to support business aims.
The Head of Security Risk & Compliance is part of RWS’ shared services Technology function and reports to VP Data & Analytics, Security & Compliance.
Primary Responsibilities:
You will be responsible for the evolution and implementation of a clear and effective Information Security strategy and risk reporting processing throughout RWS, focused on supporting business development.
* Advice and guidance to senior management on the development and implementation of RWS’ security strategy.
* Implementing, monitoring and reporting security risk across RWS to the executive team.
* Aligning and where appropriate consolidating security governance and risk management across company operating divisions, as part of a post-acquisition integration programme.
* Driving and developing the effectiveness of RWS’ ISMS.
* Maintaining and developing as required RWS’ ISO27001 certifications including leadership of external audits.
* Leading, developing and directing the Security & Risk team.
* Partnering with technology leads and operational infrastructure security team on the identification and implementation of appropriate security controls to meet customer, regulatory, statutory and compliance requirements to improve efficiency and anticipate likely future demands.
* Identifying opportunities to enhance RWS’ competitiveness and security maturity through the adoption of security focused certifications and standards
* Supporting sales through engagement with customer security teams.
* Analysing customer contracts and other legal documentation to identify areas of compliance risk.
* Secretary of RWS’ Information Security Steering Committee.
* Implementing, maintaining, developing and testing the company wide security awareness and training programme.
Person Specification
Skills and Experience:
* Background of implementing and managing information security in a global commercial environment.
* Experience in design and implementation of security control frameworks in a corporate environment and ideally in a global corporate environment
* Managed a programme to obtain, manage and maintain an ISO27001 (or similar) certification
* Sensitive to organizational priorities and adopt programmatic and appropriate positions
* Understand complex situations and communicate them clearly and unambiguously to non-technical audiences.
* Both a quantitate and qualitative techniques for measuring and communicating progress
* Able to engage effectively with stakeholders across all business areas.
* Experienced at leading dispersed teams and matrix management.
* Hold appropriate industry qualifications such as CISM, CISA, or CISSP.
* Highly proficient communicator in English.
Life at RWS:
We work hard together to deliver for our customers; our expertise, professionalism and determination to never let others down drives us to be passionate and serious about what we do, deliver customer value, yet always adding a human touch.
As a company focused on connecting people through language, diversity and inclusion are fundamental to our company culture.
We are proud to work in a company where all can succeed and grow their career and while RWS operates in accordance with all local employment laws, if local law enables any form of discrimination this is against RWS company policy, and we will adhere to the highest standard.
Equal Opportunity:
RWS embraces diversity and promotes equal opportunity, we are an Equal Opportunity Employer and prohibits discrimination and harassment of any kind. RWS is committed to the principle of equal employment opportunity for all employees and to providing employees with a work environment free of discrimination and harassment. All employment decisions at RWS are based on business needs, job requirements and individual qualifications, without regard to race, religion, nationality, ethnicity, sex, age, disability or sexual orientation. RWS will not tolerate discrimination based on any of these characteristics.
Get email alerts for the latest"Head of Risk Security and Compliance jobs in Maidenhead, sl6 4ub gb (primary)"
