Information Security Governance and Compliance Manager

 REQ ID: 127253
JOB TITLE: Information Security Governance and Compliance Manager
SALARY: £70,000-£90,000
POSTING START DATE: 05/12/2024
POSTING END DATE: 19/12/2024
LOCATION: Gaydon  

JLR’s Information and Digital Technology team is a place where you can unleash your technical ability. Whether expertly supporting applications, managing digital products, architecting solutions, or securing our platforms, you’ll work alongside other tech experts to shape our digital landscape and provide a stable platform for our operations. Stay at the forefront of innovation, and use cutting-edge technology to reimagine the future of modern luxury – be a proud creator of the exceptional.

WHAT TO EXPECT  

This is a great opportunity for the Information Security Governance and Compliance Manager to join JLR's Information Security Governance, Risk, and Compliance department, which is responsible for protecting the company's digital landscape while ensuring regulatory compliance.  

As the Information Security Governance and Compliance Manager, you will oversee all aspects of developing and implementing comprehensive risk management and compliance strategies, collaborating closely with senior leadership, internal teams, and third parties to align Governance, Risk, and Compliance initiatives with JLR's business objectives. Furthermore, you will lead the effort to help our stakeholders identify their security concerns and then describe, plan, and implement initiatives to improve their security posture.  

This is an exceptional chance to work in a dynamic, growing team and play a critical role in protecting JLR's information assets globally.  

Key Accountabilities and Responsibilities:  

• Oversee and lead the Information Governance and Compliance strategy and contribute to the development of the overall processes and artefacts (e.g., policies, standards, KPIs).  

• Set the internal and external benchmarks of compliance for JLR ICS.  

• Create and provide security governance and compliance metrics and reports to management.  

• Develop, implement, and maintain governance frameworks (e.g., IT project governance, Connected Car, supplier/vendor security).  

• Collaborate with business domains, internal/external audits, and third parties to create and implement cross-organisational security governance and compliance processes.  

• Receive, manage, and progress governance and compliance tickets/business queries.  

• Support IT and the business in adhering to documented ICS policies, standards, and procedures, providing education and awareness across the organisation and external stakeholders.  

WHAT YOU’LL NEED  

• Comprehensive knowledge of external compliance requirements.  

• Previous experience in defining information security procedures, functions, and practices based on industry best practices.  

• Strong written and oral communication skills, as this role will interface with business leaders and third-party vendors and adapt content to suit technical and non-technical audiences.  

• Strong conceptual understanding of information security frameworks and standards such as ISO 27001, NIST CSF, SCF, COBIT, and GDPR.  

• Strong project management and vendor management skills. 

• Experience with Agile methodologies (e.g., SAFe, SCRUM).  

• Previous experience within a similar role in highly regulated businesses.  

Creating Modern Luxury requires a modern approach to work. At JLR, hybrid working is a voluntary, non-contractual arrangement providing employees more choice and flexibility around how, when and where they work. Some roles require more on-site work, but details of this can be discussed with the hiring manager during the interview stage.

We work hard to nurture a culture that is inclusive and welcoming to all. We understand candidates may require reasonable adjustments during the recruitment process. Please discuss these with your recruiter so we can accommodate your needs. 

Applicants from all backgrounds are welcome. If you’re unsure that you meet the full criteria of a role – but you're interested in where it could take you – we still encourage you to apply. We believe in people's ability to grow and develop within their role – it’s what makes living the exceptional with soul possible.

JLR is committed to equal opportunity for all.