Job Description

We are looking for a Head of Security GRC to join our IT Information Security Team in Milton Keynes. You will play a leading role in managing governance, risk and compliance activities for Information Security and the wider Technology team. As the Head of Security GRC, you will be managing, mentoring, and developing the core skills and expertise of a team of GRC and analyst colleagues on a day-to-day basis, alongside proactive engagement with both business and 3rd party representatives.

You will also have a hands-on role supporting the business objectives and strategy to ensure our security and technology controls remain within the Group’s risk appetite and meet regulatory and lender requirements.

Responsibilities:
* Line management of several direct reports within the team. Resource management across the team, ensuring that the relevant workload is delivered as agreed.
* Act as the Subject Matter expert regarding Security and Technology compliance requirements and standards, including NIST and ISO27001.
* Responsible to ensuring that a suitable control framework is in place to manage security and technology risks within appetite. Covering areas including Policies & Standards; Supply Chain Risk; Operational risks; User education; and Operational resilience / Business continuity oversight.
* Ensure security and risk consultancy is provided to support BAU activities.
* Share subject matter expertise and support the wider Technology Team and business stakeholders.
* Maintain personal skills in the context of technology GRC, best practices, and the strategic direction of the Connells Group
* Owns the governance, risk, and compliance aspects of the security policies across the group.
* Support internal and external audits, responses to lenders and oversight of subsidiary control frameworks
* Carry out security assessments on third parties to manage supply-chain risk.
* Deputise for the Information Security Director when required.


Experience & skills required:
* Professionally qualifications E.G CISMP, CISSM, CISSP.
* Demonstrable Experience in similar relevant security GRC and managerial roles or broad experience and proven success in a senior Information Security role.
* Strong understanding of Information Security best practices, standards, and control
* Experience of Information Governance, Risk and Compliance principles
* Experience of the principles of security auditing and compliance validation
* Comprehensive knowledge and experience working with Security Frameworks and relevant regulations including ISO27001; NIST; PCI; GDPR
* Good knowledge of current and emerging security controls and approaches e.g. Zero Trust; DLP; access and identity management


Desirable:
* Qualification in the wider compliance, security, and IT arena E.G CISA, GDPR, PCI.


Connells Group is one of the largest and most successful estate agency and property services providers in the UK and as of March 2021 also encompasses Countrywide. Founded in 1936 and with a network of over 1,250 branches nationwide, the Group combines residential sales and lettings expertise with a range of consumer and corporate services including new homes, mortgage services, conveyancing, EPC provision, surveying, corporate lettings, asset management, land & planning, LPA receivers and auctions.

Connells Group UK is an equal opportunities employer and positively encourages applications from suitably qualified and eligible candidates regardless of sex, race, disability, age, sexual orientation, transgender status, religion or belief, marital status, or pregnancy and maternity.

CF00418