Jobs in Harbottle%2C northumberland%2C gb

Quality, Information Security & Privacy Lead

Hexagon AB Hexagon technology captures data about physical reality, makes it digitally immersive, and helps you put it to work in multiple industries.

This role would suit someone looking to support a small team within a large organisation, simplifying processes whilst maintaining key standards for the business.

You would be responsible for the management of the ISO 9001 and ISO 27001 management systems, the Cyber Essentials Plus certification, the supplier management of the critical internal supply chain, management of response to third-party information assurance requests, support to bids and tenders on Quality and Security matters; and any future security standards uplift required to support business activities.

Scope of Duties

Quality

Review and update the Quality Policy and Quality Objectives ensuring they meet the business needs and the annual Business Plan objectives as set by the Country Manager.

Conduct annual Quality Management reviews in conjunction with the management team.

Responsibility for the performance of the Internal Audit function covering both standards.

Work with an Internal Audit team to plan scheduled audits then subsequently monitor and report on the performance against plan for the Business year.

Manage issues and escalations from the Internal Audit to resolution.

Responsibility for the management of the ISO 9001 and ISO 27001 procedural documentation set and management systems.

Responsibility for retaining the accredited certification through the certification external audit lifecycle.

Work with the accreditor supplier to schedule, organise and run the annual external surveillance / recertification audits.

Work with the management team to publish, manage and remedy corrective action findings arising from external audit in a timely manner.

Support the team with the following :

• Remedy corrective actions raised through internal audit findings in a timely manner.
• Conduct business and strategic risk reviews.
• Conduct supplier reviews as required.
• Manage customer complaints and compliments to completion.
• Promote continual improvement and management of the organisational change as it affects the management systems.
• Support the management team to maintain their information asset and physical asset register items.

Information Security

Review and update as approved, the Information Security Policies and Information Security Objectives for the business ensuring they match the Business Plan objectives and strategic direction set by the Country Manager.

Responsibility for the maintenance of the ISO 27001 related process and procedural documentation set.

Support the management team with the following :

Supplier management of the internal supply chain for Information Security controls with annual service reviews; joint risk management; SLA setting and performance measurement reporting back to the business.

Manage security incidents to resolution.

Perform required Information Security risk assessments as required for the business.

Create Information Security Waivers as required for the business.

Work with the Information Security Administrator to monitor and review the staff vetting process.

Cyber Security

Manage the business certification Cyber Essentials Plus.

Maintain the annual recertification to Cyber Essentials Plus with key supply chain involvement as required.

Manage the response to third-party information assurance requests and support to bids and tenders on Cyber Essentials topics.

Corporate Compliance & Privacy

Be the focal point for the management of Corporate Compliance requirements flowing down from the higher organisation levels; including but not limited to : Information Security; Cyber Security; Data Protection; Project Delivery; Legislative and Regulatory Compliance.

Privacy Governance in monitoring compliance and data privacy updates, advice to staff on the processing of personal data, upkeep of records and the point of contact for local breaches and issues.

Requirements

Five years or more experience managing ISO 9001 and ISO 27001 management systems within an IT environment.

Training and qualifications to support ISO 9001 and ISO 27001 standards.

A professional, self-starting, dynamic and positive attitude.

Excellent communication and effective inter-personal skills with all levels.

Excellent organisational skills and attention to detail.

Experience of stakeholder management and able to influence at Senior Management Team levels.

Ability to multitask and prioritise workload.

Excellent planning and time management skills.

Strong functioning knowledge of :

Functioning knowledge of :

Desirable to have an understanding of software delivery and software testing lifecycles and experience working in a software environment.

Familiarity with Public Safety Command and Control / Geospatial / Infrastructure and GIS / Defence solution supplier environments would be highly desirable.

Full, preferably clean driving licence.

All candidates must either be security cleared or be prepared to obtain security clearance to SC (Security Check) and NPPV3 (Non-Police Personnel Vetting level 3) level. All job offers will be conditional subject to the candidate SC and NPPV3 level clearance prior to employment.

Lived in UK for at least the last 3 years to obtain clearance.

We Offer You

Hybrid Working

J-18808-Ljbffr