The Vacancy

We have undergone a transformation in recent years, taking over the tech industry in the north of the UK with a significant investment into IT to align with our vision of being a digital business. We’re also the UK's leading consumer delivery specialist, and that’s because we’re obsessed about providing our customers with the ultimate delivery experience. 

As a result of this, we’re currently looking for a Cyber Assurance Manager to join our Cyber Security team on this exciting journey.

Our head office is based in Morley on the outskirts of Leeds. However, as part of our continued growth in the IT industry, we recently opened a brand new Tech Hub based in the riverside area of Leeds city centre overlooking the city skyline and River Aire. The successful candidate would be working from this city centre location, with the option of a hybrid approach to working location.

With its own innovation lab, our brand new Tech hub showcases bespoke content on a rotating screen as well as displaying the latest prototypes which may be entering the Evri world in the not-too-distant future.

The Tech Hub also includes a private roof terrace overlooking the canal, as well as space to host external events, workshops and hackathons. 

Your purpose (in a nutshell)

You will be working to ensure that cyber risks to customer, people, and corporate data are Identified, assessed, and managed accordingly to keep the organisation secure.

You will be accountable for:

• Operating and maintaining the Cyber Risk Framework, including communication of the framework and approach to key stakeholders across the business.
• Identification of cyber risks to the business, assessment of those risks according to our risk methodology, and assigning of subsequent Inherent risk ratings.
• Identification of controls to manage risks to an acceptable level, and working across the business to assess the effectiveness of these controls.
• Creation of Key Risk Indicators to monitor performance and our management of cyber security risks to the business.
• Taking the lead on managing risks throughout our supply chain, including assessment of current and future partners to reduce our level of third party risk.
• Working together with the Chief Information Security Officer and Cyber Security Manager to manage our compliance to existing standards such as PCI DSS, and to achieve further cyber security certifications.
• Building stakeholder relationships and ensuring the cyber security policies and processes are being adhered to within the organisation and working with the stakeholders to effect culture change to create a security driven culture.
• Achieving objectives as agreed with the Chief Information Security Manager and the Cyber Security Manager

Technical & People Skills:

• Risk assessment and management, Including risk quantification methods and creation of risk treatment plans.
• An understanding of the art of the possible within business (I.e. balancing the minimisation of cyber risk vs the impact to business operations.
• Relationship building across teams and grades, in order to secure buy-in to cyber security risk across the business.

Knowledge & Experience:

• A minimum of 3 years' experience of creating and managing risk or risk-based Information security frameworks aligned to international standards, such as ISO 31000, ISO 27001, or the NIST Cyber Security Framework.
• Experience of managing cyber and information security risks within the supply chain.
• Working understanding of Investigation of security breaches and security incident management.

Qualifications:

• A relevant undergraduate or postgraduate degree, or industry recognised certification, such as CISM, CISSP.