Security and Privacy Manager

Posted 09 January 2023
Salary £70000 - £85000 per annum
LocationBirmingham
Job type Permanent
DisciplineInfrastructure ​
ReferenceML-59
Contact NameMorgan Lingard

Job description

Security and Privacy Manager
Birmingham (Hybrid)
£70,000 - £85,000 + Excellent Benefits

Digital Waffle is working in partnership with a provider of software development, data analysis, and marketing. This is a fantastic opportunity for an enthusiastic Security and Privacy Manager.

Job Role
The Security and Privacy Manager will identify and monitor security and privacy training needs within the company, Create a strategic, global plan to measurably improve security and awareness within the firm and with targeted employee groups, and Design, plan, and put in place security and privacy training programs, campaigns, policies, and procedures that fulfill those needs.
  • Own, develop, and mature a global information security and privacy training and awareness program.
  • Develop and implement security and privacy awareness program charter and strategy.
  • Review existing training programs; suggest enhancements and modifications to improve engagement, learning, and retention.
  • Ensure training materials and programs are current, accurate, and effective. Is able to create curriculum and deliver training across the organization.
  • Manage the firm’s phishing simulation testing program Collaborates with vendors and third-party training providers to arrange employee registration for and participation in outside training programs.
  • Ensures that training milestones and goals are met while adhering to approved training budgets.
  • Conducts or facilitates required and recommended training sessions.
  • Define ambitious measurable goals, and objectives, and identify metrics and solutions that show impact and growth over time, Supports cross-functional collaboration to ensure projects are delivered according to the agreed scope and budget, and Performs other related duties as assigned.
  • Specific duties or responsibilities may be reviewed from time to time to reflect changes in personnel and management structure, staff location, or services.

Requirements What do you need?
  • Strong executive presence, with an ability to moderate large, executive-level meetings, both in person and virtually.
  • At least five years’ experience in delivering, developing, and managing training development.
  • At least three years of experience in the Security/Privacy fields.
  • Experience in reviewing policies and requirements from the user perspective, providing a pragmatic approach to improving awareness.
  • Experience with requirements gathering, analysis, and recommendation development.
  • Experience in effectively communicating with both technical and non-technical roles.
  • Experience with risk and issue management.
  • Strong interpersonal skills, with the ability to build strong relationships with peers and executives.
  • Strong project planning and management skills; ability to break down complex problems into manageable goals, Outstanding oral and written communication skills; with strong graphic design abilities.
  • Knowledge of cyber security frameworks, such as NIST, ISO, MITRE, etc is desirable.
  • Knowledge of privacy regulations, such as GDPR, HIPAA, CCPA, PIPL, etc, is desirable.