Senior Manager Information Security

Job DescriptionThe RoleAt WHSmith our people are at the heart of everything we do. They are the ones that go the extra mile for our customers. The ones that enable our growth. That’s why our IT team works closely with stakeholders to develop and implement technology solutions.As the Senior Information Security Manager here you will be responsible for maintaining and executing WHSmith’s cyber security strategy, ensuring compliance with regulations, managing incident response efforts, and implementing effective security controls to protect the organisation's digital assets. You will lead cross-functional teams and our third-party providers and foster a culture of security awareness to mitigate cyber risks and safeguard critical information.What you will be doingOverseeing day-to-day security operations, including monitoring, incident response, vulnerability management, and threat intelligence, to maintain a strong security posture and promptly address any security incidents or vulnerabilitiesEstablishing and maintaining cyber security policies, standards, and procedures, ensuring compliance with industry regulations and best practices, and creating a framework for security governanceWorking closely with senior management, IT teams, legal and compliance departments, and other stakeholders to align cyber security initiatives with business objectivesProviding strategic guidance to senior management, ensuring that cyber security initiatives support business operations while mitigating riskMaintaining cyber security policies, standards, and procedures, ensuring compliance with industry regulations and best practicesLeading the organization’s incident response efforts and establishing robust processes for identifying, responding to, and recovering from security incidentsWorking closely with WHSmith’s technology architects to design and implement secure infrastructure, networks, and systemsCollaborating with vendors and third-party suppliers to assess and manage their cyber security capabilitiesWhat we are looking forExperience in Information Security across IT and business within areas such as PCI-DSS, GDPR, ISO/IEC 27000+, etc.Experience in an Information Security management function and/or related functions (such as IT audit and IT Risk Management)Experience of IT Architecture including the development (and ensuring adherence to) architecture principles and standardsExperience of successfully delivering large or complex technology programmes and projects through the full lifecycleExperience of aligning architecture support to agile/iterative development teams/functions in an effective wayHow we reward our teamsHybrid working model from home and in the office4pm Friday FinishFlexible Working25 Days holiday, plus your Birthday off, plus Bank Holidays with an opportunity to buy extra days holidayFamily Friendly LeaveCompetitive Pension ContributionSharesave SchemeAnnual Bonus based on company and personal performanceCompetitive Salary and Car AllowancePrivate Medical InsuranceStaff Discount Card for stores and onlineAbout usWHSmith have occupied our place in our customers’ hearts for over two decades. You’ll find our stores and our family of brands in airports, hospitals, railway stations, on high streets and in shopping centres – as well as right across the world! We are an ambitious team that thrives on pace, collaboration and innovation resulting in a real entrepreneurial culture.Celebrating 230 years, we’re proud to have grown and evolved into a globally recognised brand present in over 30 countries around the world, and we’re proud to be that air of familiarity people love and trust on their journey, both in life and through life. As a diverse group of over 12,000 colleagues, we are all on the same journey to a better business through our commitments to our planet, people and the communities we serve.WHSmith are proud to be an inclusive employer, we want our colleagues to feel welcome, and free to be themselves with us.