IT Security Manager

As IT Security Manager you will own Rexel UK and Ireland's IT security posture, driving continuous improvement in a dynamic cyber landscape. You will develop and maintain the technical security strategy, standards and controls to protect systems, data and people. You will ensure regulatory compliance and oversee security incidents, risks and data privacy. You will partner across the business and with external partners to strengthen security, enable secure business outcomes and support ongoing investment in security capabilities.

• Develop, implement and maintain the technical security strategy, standards, processes and controls
• Ensure compliance with Cyber Essentials, GDPR, PCI DSS and other regulatory requirements
• Manage major security incidents and oversee information security, physical security, continuity, crisis management and privacy risks
• Coordinate security risk assessments with technology and business teams and track mitigation plans
• Embed security-by-design across IT projects, platforms, infrastructure and architecture
• Ensure secure data management across environments in line with GDPR
• Monitor and report security performance and drive improvements against metrics
• Lead vulnerability management, patching, penetration testing and remediation
• Develop and deliver security policies, guidance and awareness; work with Legal, Audit, Sales and partners to meet requirements
• Manage IT security budget and support investment decisions; build relationships with Group Technology and vendors

• IT security, cyber security, technology risk, privacy, governance or compliance experience
• Security controls across infrastructure, cloud, applications or data environments
• Familiarity with Cyber Essentials, GDPR, PCI DSS, ISO standards or other security frameworks
• Experience with security incidents, vulnerability management, patching or penetration testing
• Experience working with third-party technology suppliers and partners
• Ability to explain technical risks and recommendations to diverse audiences
• Experience delivering security awareness, guidance or training
• Experience in a fast-paced environment with changing priorities

• Collaboration
• Takes accountability
• Customer focus
• IT security/cyber security
• technology risk, privacy, governance or compliance
• security controls across infrastructure, cloud, applications or data environments