Security Controls Lead

The Information Security Controls Lead will develop own and manage the JD Sports information security controls framework ensuring alignment with internationally recognised standards such as CIS, NIST, ISO2700X etc, implement methods and processes for attestation and incorporation of controls throughout the lifecycle of information technology solutions covering all JD Sports Business, Technology and Operational entities globally and help drive a robust security posture for a large, complex organisation, trading globally within a constantly evolving information security threat environment

·       Job Title – Security Controls Lead

·       Location – BL9 8RR

·       Working rota – Monday-Friday

·       Working hours – 40

What You'll Be Doing:

As a Security Controls Lead, you'll be doing the following: 

• You will manage, develop, test and improve the JD Sports Information Security Controls Framework and provide a variety of capabilities to enable the control framework to be exploited to good effect by the various elements of the business
• Engage in the qualification, selection, and ongoing talent management of potential and existing technology outsourcing partner’s and their specialist resources. 
• Contribute to the alignment of security governance for information security controls in line with JD Sports Policies, Standards, and security strategy. 
• Work, closely with architecture and engineering to build out a library of patterns and templates for security controls that can be consumed by the wider business for rapid implementation. 
• Prepare and deliver presentations to the senior management setting out goals, objectives achievements and dependencies to map and monitor the adoption and coverage of security controls across the organisation. 

What We're Looking For:

• Demonstrable experience in operating and implementing a wide range of technology security solutions/controls, including hybrid cloud / on-premise security capabilities.   
• Experience with common information security management frameworks, such as International Standards Organization (ISO) 2700X, NIST, CIS, the IT Infrastructure Library (ITIL), Control Objectives for Information and Related Technology (COBIT), Critical Security Controls for Effective Cyber Defense, or the ISF Standard of Good Practice / IRAM2.  
• Participate in the timely provision of security assurance oversight, advice and support to multiple and complex projects within a global technology environment. 
• Awareness of various operating systems including but not limited to Windows, Linux, Unix. 
• Awareness of Database technologies (SQL, Oracle, DB2, Mongo) and associated controls optimised for their protection.  

The Company:

The JD Group is a leading omnichannel retailer of Sports Fashion, Street & Premium Fashion, Outdoors and Gyms with over 60,000 colleagues over 3,400 stores across several retail fascia's in over 30 markets around the world.

We are an equal opportunities employer who embraces and values differences. We recognise the importance of an inclusive workplace culture in which everyone can thrive irrespective of their background or identity.

To be a part of this successful and continuously growing company, you will have the desire to ingrain our strategic goals of being a people first, a digital leader and customer focused organisation which provides operational excellence and is continuous with identifying new areas of growth into our day-to-day.

We know our employees work tirelessly to make JD Sports the success it is today and in turn, we offer them some amazing benefits:

• Incremental Holiday Allowance
• Staff Discount on qualifying purchases across Group retail stores and online
• Exclusive Colleague Bike Discount scheme
• Discounted Gym membership
• Personal development opportunities to learn and develop at work
• Access to Apprenticeships and accredited qualifications

Interested?

If you are interested in this position, then press the Apply Now button.

Due to the high volumes of applications our opportunities attract, it takes time to review them all. If you don't hear back within two weeks of your application, please consider your application to have been unsuccessful on this occasion

Applications that meet the skills criteria will be contacted for a 1st stage meeting with the talent team. Shortlisted candidates will then be invited to interview with the hiring manager.

Thank you again for your time.

#LI-JR11

•

Last updated on Aug 27, 2024