Department: Technology and Digital

Reports to: Cybersecurity Manager

Role Introduction

We're seeking an Assistant Cybersecurity Manager to join our IT Security team as part of the IT Department. The role will report directly to the Cybersecurity Manager and be the leading expert in Information Security and Data Protection. Joining a highly motivated team, you'll work in a diverse and challenging sector. With a positive and flexible approach, you'll deliver a high-quality service. The focus on supporting people alongside a critical eye for data accuracy will be paramount to a successful candidate. You'll help navigate our journey towards a digital strategy, using your expertise to make recommendations involving data or information security when considering any new solution. With expert knowledge of navigating the requirements of compliance with the Data Protection Act and General Data Protection Regulations. You'll ensure what we do is consistently in line with our contractual and legal obligations to the people we support and our employees.

Key Responsibilities

• Carry out daily security operational tasks, such as reviewing security events and logs, diagnosing, responding to security incidents, and analysing CVE.
• Act as Data Protection Office to ensure continuous compliance with data security and safety regulations and smooth sailing through any audits.
• Assist in investigating reported security case and follow up with users for any non-compliance issues and coordinate plans for remediation/ mitigation of risks and exposure.
• Coordinate internal and external audit work over IT operations and processes; liaise with IT teams in gathering documents and testing related IT controls during audit reviews.
• Collaborating with technical managers to design and implement internal frameworks and processes for departments and companywide relating to data protection.
• Coordinated responses to data protection breaches and data subject access requests; Investigate possible data protection breaches and makes decisions on the necessity to report to GM/AGM.
• Establish and maintain the information and cyber security policies and guidelines.
• Provide awareness training on related policy and guidelines.
• Providing support and guidance to other operational managers and heads of department to build data protection awareness.
• Communicating relevant updates to all employees/consultants.

Requirements

• University degree / Diploma holder in Information Technology or related disciplines.
• IT background with operations, enterprise networking, operating systems and database security risk controls.
• Solid hands-on experience in a number of security systems, including firewalls, intrusion detection systems, anti-virus software, authentication systems, log management, content filtering, data loss prevention systems, etc.
• Knowledge of IT security management such as ISO 27001, IT audit/ compliance.
• Sound understanding of regulations and legislation regarding Data Protection.
• Highly organised, able to work well under pressure and to deadlines.
• Good communication and interpersonal skills.
• Ability to work collaboratively and effectively with other managers across the business.
• Ability to work to deadlines and achieve results.
• Ability to balance commercial interests with compliance requirements.
• A keen interest in the sports venue industry and innovation in the technical kit, actively seeking information and sharing internally with the team.

Full-time

Personal & Application Information

We are an equal opportunity employer. Data collected will be treated in strict confidence and used for recruitment purpose only. Applicants who are not invited for interviews within 4 weeks may consider their applications unsuccessful.