Information Systems and Security Compliance Manager

Description:

Information Systems & Security Compliance Manager

Permanent, Full-time

Location: Selby, hybrid work pattern

Closing Date: 17th August

 

We're looking for an experienced Information Systems & Security Compliance
Manager to play a critical role in ensuring Drax meets its technology and
security compliance obligations across a complex and evolving regulatory
landscape.

 

Working within our Information Security, Governance, Risk
& Compliance function, you'll help shape a robust compliance culture,
influence senior stakeholders, and support the delivery of our security
strategy.

 

This role represents a great opportunity to be part of a
collaborative and evolving security function!

 

Who we are:
We’re not just talking about making a difference, we’re
making it happen. We generate dispatchable, renewable power and create stable
energy in an uncertain world. Building on our proud heritage, we have ambition
to become the global leader in sustainable biomass and carbon removals.

 

You’ll be joining our teams of practical doers, future
thinkers and business champions. We’re enabling a zero carbon, lower cost
energy future for all, and working hard to decarbonise the planet for
generations to come.

 

About the role:  
Reporting to the Head of InfoSec Governance, Risk and
Compliance, you’ll act as the central point of contact for Information Systems
and Security (IS&S) compliance across the Group.

Key accountabilities include: 

Lead IS&S compliance
governance activities, reviews and stakeholder engagement.

Oversee IS&S compliance
against regulatory and contractual obligations including Smart Energy Code
(SEC), PCI DSS, ISO27001 and NIS Regulations.

Develop IS&S compliance
reporting, schedules and improvement plans.

Support audits, assurance
activities and security input into projects.

Who we’re looking for:  
To be successful in this role you’ll ideally have…   

Proven
experience in information security compliance, governance and risk
management.

An understanding
of regulatory regulations such as the Smart Energy Code (SEC), PCI DSS,
27001 and NIS Regulation.

Experience
engaging with auditors, regulators and business stakeholders

Ability
to translate complex security compliance requirements for both technical
and non-technical audiences.

Ideally
be certified in either CISSP, CISA, CISM or equivalent.

Rewards and benefits:  
As you help us to shape the future, we’ve shaped our rewards and benefits to
help you thrive and support your lifestyle. If successful in this role, you’ll
get:   

A
discretionary bonus depending on company performance

Private
Healthcare 

SAYE
(Sharesave): discretionary scheme from time to time 

Personal
accident cover 

Group
personal pension plan where we’ll contribute up to 10%  

Holiday
- 25 days plus bank holidays  

Reimbursement
of the cost of your annual membership of one relevant and appropriate
professional body 

We’re committed to making a tangible impact on the climate
challenge we all face. Drax is where your individual purpose can work alongside
your career drive. We work as part of a team that shares a passion for doing
what’s right for the future. With Drax you can shape your career and a future
for generations to come.

 

Together, we make it happen.

 
At Drax, we’re committed to fostering an environment where
everyone feels valued and respected, regardless of their role. To make this a
reality, we actively work to better represent the communities we operate in,
foster inclusion, and establish fair processes. Through these actions, we build
the trust needed for all colleagues at Drax to contribute their perspectives
and talents, no matter their background.

 

How to apply:  
Think this role’s for you? Click the ‘apply now’ button to begin your Drax
journey.
If you want to find out more about Drax, check out
our LinkedIn page to see our latest news