Salary: 50000 Pro Rata
Work Life Balance: Northampton/Hybrid
Role Type: FTC up to 9 months
Candidate Journey: Our goal is to reply to applications within 3 working days. Additionally we make sure to acknowledge evaluate and respond to all applications as a way of showing our appreciation for your time and effort in applying to us.
Interview Process:
TBC
At Staysure Group we are on an ambitious growth journey to enhance customer experiences empower our colleagues and drive sustainable business success across multiple brands. To achieve these goals we have aligned over 50 transformation initiatives under five strategic pillars:
- Growth Core Challenger Comparison & Partnership brands
- Product platform and customer journey transformation
- Customer and employee operations transformation
- Security compliance and regulatory transformation
- Business optimisation
The Groups Transformation Function is responsible for realising these strategic objectives through the design delivery and management of the Group Transformation Portfolio. We work crossfunctionally with experts from Technology Product Finance and other business areas to deliver bestinclass outcomes.
The Role:
The Security & Compliance Project Manager will be responsible for leading the endtoend delivery of security and compliance transformation initiatives across the Staysure Group.
Reporting to the Security & Compliance Portfolio and Programme Manager this role will work closely with key trading stakeholders to ensure the successful design development and implementation of regulatory security and compliancedriven projects.
This person must bring a deliveryfocused approach to compliance priorities turning hypotheses into structured initiatives and managing them through idea discovery design and delivery.
The role requires extensive experience in UK EU and global compliance and regulatory agendas including but not limited to:
- GDPR (General Data Protection Regulation)
- Consumer Duty
- FCA regulations
- PCIDSS (Payment Card Industry Data Security Standard)
- Operational Resilience
- ThirdParty Risk Management
- Other key security and compliance frameworks
What will you do
Security & Compliance Portfolio Delivery
- Lead the endtoend management of security and compliance projects ensuring initiatives align with regulatory requirements business objectives and risk frameworks.
- Develop and manage a security and compliance transformation roadmap identifying priorities and ensuring projects are delivered on time and to regulatory standards.
- Ensure that security data protection and compliance frameworksare fully embedded within transformation initiatives across the business.
- Collaborate with legal risk IT security and operational teamsto ensure compliance with UK EU and global regulations.
Regulatory & Security Compliance
- Provide subject matter expertise in regulatory compliance and risk management supporting teams to implement bestinclass security and compliance practices.
- Work with stakeholders to identify gaps in compliance and develop remediation plans to address regulatory risks.
- Ensure GDPR Consumer Duty PCIDSS and FCA compliance are considered at every stage of product platform and service development.
- Oversee thirdparty compliance management ensuring partners and vendors align with regulatory and security standards.
Project & Stakeholder Management
- Engage with senior business leaders and regulatory bodies to provide updates on compliance initiatives and project progress.
- Act as the key point of contact for security and compliance project delivery ensuring clear communication governance and risk management.
- Work crossfunctionally with technology legal risk finance and operational teams to ensure seamless integration of compliance measures.
- Establish and monitor key compliance metrics ensuring continuous improvement in regulatory adherence and security measures.
Operational Resilience & Risk Mitigation
- Lead projects that enhance the resilience of business operations ensuring the Group meets FCA Operational Resilience requirements.
- Identify potential security threats and compliance risks developing proactive strategies to mitigate business exposure.
- Support the business in achieving and maintaining key security certifications and regulatory approvals.
Essentials:
- Extensive experience in security compliance and regulatory project management preferably within the financial services or insurance sector.
- Strong understanding of UK EU and global compliance regulations including GDPR Consumer Duty FCA PCIDSS and Operational Resilience.
- Proven ability to translate regulatory requirements into practical scalable business initiatives.
- Experience leading complex crossfunctional security and compliance projects from discovery to delivery.
- Strong stakeholder management skills with the ability to engage and influence senior executives regulators and thirdparty partners.
- Knowledge of risk management data protection and cyber security frameworks.
- Familiarity with thirdparty compliance and supplier risk management.
- Excellent project management governance and reporting skills.
Bonus skills you may pack in your suitcase:
- Professional certifications such as CIPP/E (Certified Information Privacy Professional Europe) CISSP (Certified Information Systems Security Professional) CISA (Certified Information Systems Auditor) or PRINCE2.
- Experience with ISO 27001 NIST or other security frameworks.
- Knowledge of AI and automation in compliance processes.
- Experience in agile delivery and productled transformation approaches.
Were assembling a diverse team where skills not checkboxes reign supreme regardless of race religion sex sexual orientation gender identity or disability.
Staysure Group welcomes all new starters with open arms providing training development opportunities andgreat benefits.