Global Manager of Information Security overseeing the Governance, Risk, and Compliance program at BCM One. Leading audits, developing policies, and ensuring legal compliance in a hybrid role.
Responsibilities
Define and implement the organization's GRC program, including policies, procedures, and controls
Oversee and manage our global information security governance and compliance programs
Develop and maintain robust security policies, procedures, and best practices
Coordinate internal and external audits (SOC, ISO, Cyber Essentials Plus), ensuring readiness and compliance
Conduct internal audits, identify gaps, and recommend corrective actions
Deliver training sessions and security awareness initiatives across the organization
Lead third-party risk assessments (TPRM) and respond to vendor security assessments
Chair ISMS Management Review meetings and monitor cyber risk metrics
Support IT with vulnerability management and penetration testing planning
Contribute to data privacy and governance compliance under GDPR, UK DPA, NZ Privacy Act, etc.
Support Business Continuity Planning (BCP) testing and documentation
Requirements
Bachelor’s degree in Computer Science, Information Systems, or related field (or equivalent work experience)
10+ years of experience in IT governance, compliance, or risk management at a global company
Proven experience with international compliance, specifically GDPR, data protection laws, and compliance initiatives
Six Sigma is a nice to have
ISO 27001 Internal Auditor certification is highly desirable
Strong understanding of information security and IT governance frameworks
Familiarity with telecommunications and technologies like networking and VoIP is preferred
Ability to manage complex, cross-functional projects with a high attention to detail
Excellent communication and stakeholder engagement skills
Proficient in Microsoft Office Suite, especially SharePoint, OneDrive, Outlook, Teams, etc.
Benefits
Competitive industry salaries
Comprehensive medical, dental, and vision insurance
Company-provided life and disability insurance
Matching 401 (k) plan
Employee Emergency Assistance Fund
Paid holidays and vacation time
Job title
Global Manager, Information Security, Governance & Compliance
Managing Director for Security and Resilience at Edison Electric Institute overseeing security and resilience operations for electric power system. Leading a team of experts in national security and regulatory processes.
Head of AI Security at Absa developing security frameworks for AI systems. Responsible for safeguarding AI platforms against cybersecurity threats and ensuring secure development practices.
Security Officer responsible for armed security at the Arizona State Courts Building. Patrolling, monitoring security systems, and ensuring safety during shifts, holidays, and weekends.
Senior Security Engineer managing Privileged Access Management solutions for ZEISS. Engineering and supporting PAM ecosystem, with a focus on BeyondTrust Password Safe, and ensuring reliable service delivery.
Principal Technology Risk & Control Officer managing technology risk assessments and controls at Northern Trust, a leading financial institution. Collaborating across multiple technology domains to ensure alignment with business objectives and regulatory expectations.
Senior Mobile Developer focused on Information Security developing mobile applications for Android and iOS using Flutter. Ensuring adherence to best security practices and developing secure solutions.
Application Security Architect with software development and application security experience needed for WEX. Responsible for securing applications by guiding and assessing security solutions.
Network Engineer specialized in Security managing systems for Arauco, based in Santiago. Overseeing security protocols and configuration of security equipment in a corporate setting.
Security Administrator managing USAF unit - level security policies and procedures at Offutt AFB. Performing various administrative tasks in support of senior staff and commanders.
OT Cybersecurity Engineer ensuring secure operations of production environment at Mercedes - Benz Türk. Overseeing cybersecurity measures and collaborating with IT and planning teams.