Compliance Manager (InfoSec/Data Protection) Full Time

Leatherhead, Surrey
Cisilion Ltd

Cisilion is an award-winning global systems integrator and managed service provider, working with clients in over 70 countries across five continents. We hold Gold Partner status with leading technology vendors including Cisco, Microsoft, and Dell Technologies.

The Compliance Manager works as an integral part of the Cisilion Operations team, and has overall accountability for making sure that Cisilion meets its compliance objectives. Compliance includes but is not limited to Information Security, Quality Management, Data protection and Health and Safety although this role has a keen focus on InfoSec and Data Protection. Someone who has experience of driving an organisation through ISO27001 and 9001 audits. This can include working with internal/external auditors, and clients to ensure that company objectives are met.

Key Responsibilities & Duties

• Work closely with the Operations Director on the strategic direction of compliance and the requirements of the business.
• Be proactive in making recommendations for updates to policies & procedures as required.
• Develop and maintain excellent working relationships with the rest of the organisation to champion information in everything we do.
• Maintain high levels of professional conduct, including but not limited to: co-operative engagement in tasks set; the exercising of initiative to suggest, through line managers, improvements to the service.
• Provide clear and professional styles of communication at all times.
• Responsible for ensuring that business continuity and disaster recovery plans are in place, and tested to ensure continued business operation during adverse events.
• Annual risk assessment programme generation and maintenance.
• Quarterly reporting forums to and from the board level to discuss compliance related matters.
• Monthly meetings with in scope departments to monitor compliance activities and drive improvements.
• Running an internal audit program compliant with the requirements of the external certifications to monitor internal performance.
• Driving improvements in compliance areas in line with external and internal audit findings.
• Generation and review of internal policy with regard to compliance areas.
• Selection of appropriate training for compliance matters to maintain assurance levels required by customers.
• Responding to customer requests for information, incidents, and managerial information requests accurately and in a timely manner.
• Ensure there are the required processes and procedures to respond rapidly and effectively to IT security incidents, managing them in a professional manor including computer forensics for evidence gathering and preservation. Appropriate and sensitive handling of affected staff and efficient liaison with external agencies when required.
• Keep up to date with changes in compliance area updates including new trends, threats and control measures.

Experience

Essential:

• Must come from a Information Security (InfoSec) and Data Protection background and have strong experience of compliance within this area.
• Have good experience of taking an organisation through ISO27001 and 9001 audits.
• ISO Internal Audit qualified.
• Demonstrable knowledge of ISO 9001 and 27001 standards.
• Thorough knowledge of the technologies delivered to customers.
• Knowledge of Data Protection including GDPR regulations .
• Understanding of the key Cyber Security Frameworks.

Desirable:

• Experience delivering or supporting an information security management system.
• Degree or equivalent.
• Knowledge of Network, Virtualisation and Security technologies.
• Knowledge of collaboration applications, eg Webex, Yammer, SharePoint, Skype for Business.