Director of Information Security & Governance

Signant Health ,
London, Greater London

Overview

We're looking for a candidate to fill this position in an exciting company. In this role, you will establish and lead all aspects of the company's Information Security, Compliance and Risk Management program, including driving strategic direction, implementation and day-to-day operations of controls. You will work closely with other partners across various teams (Legal, Sales and Support, Product, Services, Operations and IT) to ensure the company's security and compliance postures are robust and exceed all applicable standards. You will drive security audit and compliance initiatives to clearly identify control objectives and work with technical teams to meet or exceed them with effective evidence gathering for internal and external audits. Absolutely key is that this role represents the organizations security and compliance to clients and partners. You must have experience working in a dynamic, fast-paced environment and be ready to leverage multiple forms of communication to articulate complex concepts with proficiency to both technical partners as well as executive management. Track record of independently performing information security and gap assessments and audits. Experience in incident response - capable of leading IR process. Information Security Certifications (CISSP (required), CISM, CRISC, CCSP ) and/ or other related security certification. Privacy Certifications (CIPP, HCISPP) and/or other privacy certification. ITIL or PMP Certification. Have CISSP (required), CCSP, CISM, CRISC or an equivalent professional security qualification. Evidence that you are considered one of the Subject Matter Experts in all facets of the role. Experience with multiple compliance areas such SOC, SSAE, HIPPA, ISO 27001, GDPR and NIST. Awareness of relevant data protection laws and regulations (e.g. EU Directives and GDPR, CCPA in US or other similar legislations