Technical Risk and Compliance Manager – Cheshire

Wilmslow, Cheshire
GBV Ltd

I have an immediate requirement to source a Technical Risk and Compliance Manager for my client based in Cheshire.

We are looking for a Technical Risk and Compliance Manager to join our team and help us ensure that our SaaS products meet the highest standards of security and that we have both the technical mechanisms and processes in place to protect our customers data.

You will be responsible for overseeing and managing the technical aspects of our risk and compliance program. This will include planning and co-ordinating risk assessments, audits, and reviews, implementing policies and procedures, and providing guidance and training to staff and stakeholders.

Responsibilities:

Technical Expertise:

• Deep understanding of the technical risks faced by a SaaS software company and the design aspects which can be put in place to mitigate these risks.
• Knowledge of secure software development practices, secure networking and protection mechanisms and data security.
• Stay up-to-date with the latest industry security news, vulnerabilities, and risks.

Technical Risk

• Develop and maintain the technical compliance framework and documentation for the company, keeping this updated as changes are made to our security approach.
• Implement and monitor technical controls and measures to ensure compliance with internal and external policies, regulations, and requirements, and address any gaps or issues.
• Create and suggest useful measurements to aid in improving Information security processes and procedures.
• Manage periodic reporting requirements to relevant stakeholders.

Compliance Management:

• Collaborate with external consultants to plan and deliver industry standard security accreditations such as ISO 27001& 9001, Cyber Essentials Plus, SOC2, IRAP and ensure these are renewed successfully on an annual basis.
• Collaborate with internal and external technical security teams to schedule security testing, review output from security testing and schedule remediation of any detected vulnerabilities.
• Liaise with external vendors to manage security and regulatory requirements.
• Contribute to the development and execution of the security awareness programme.

Sales & Customer Success Collaboration:

• Create and catalogue the responses made in Requests for Information or Requests for Proposal around security to ensure we provide accurate responses based on our evolving security posture.
• Respond to all aspects of security and compliance requests from current and prospective customers, including, input into the customer contracting process to ensure that we can meet the security requirements stipulated in agreements.
• Collaborate across the organisation to embed a proactive risk culture.

Continuous Improvement:

• Demonstrate a continued improvement to our overall security and compliance to a set of defined KPIs

Who are you?

• Proven experience in a technical role, preferably in a SaaS software product background.
• Strong technical background and understanding of technical security compliance.
• Excellent presentation and communication skills, both verbal and written.
• Ability to simplify complex technical concepts for non-technical audiences.
• Strong problem-solving and analytical skills.
• Demonstrated ability to work collaboratively in a team environment.
• Willingness to travel as required for client meetings and presentations.

Expectations are to be based in the office 1 day per week.

Salary is negotiable on experience but with a wide range of £70-95k.