Information Security Compliance Officer

The company

RealVNC® is a highly successful software company based in Cambridge (UK) city centre. As the original developers of VNC® remote access technology our software is used by hundreds of millions of users worldwide from the non-technical home user to IT professionals from global companies, such as Intel, IBM, NASA, Shell, DreamWorks and Philips.

Having recently secured PE investment, we are entering the next chapter in our growth journey and are looking to expand our team.

The role

As Information Security Compliance Officer, you will plan, implement and manage our internal information security policies and procedures. Using your experience, you will ensure these policies and procedures are as effective as they can be.

Main responsibilities:

• Working with our security and IT/Systems teams – and with other teams as necessary - to perform cyber risk assessments to understand risk level, significance and scope and to work with these teams on providing practical mitigation steps

• Report and investigate irregularities and non-compliance issues
• providing support for both internal and external audits and provide support with risk assessments
• Regular communication of audit and compliance status to management

• Perform vendor risk assessments and provide results and recommendations to the relevant teams

• Maintain our ISMS and internal risk register as well as reviewing, and if needed improving, our current processes

Requirements

You

Your strong communication and influencing skills will enable you to advise on information security to a commercial and technical audience to ensure best practice requirements are embedded across the organisation. You will also have;

• A good understanding of systems and security
• Demonstrable experience of risk management and ISO27001, ideally within a SaaS vendor
• An understanding of data protection regulations and how these related to information security
• Experience in performing internal and external audits and assessments

Anything else?

Candidates educated to a degree level would be preferential however this is not essential

Benefits

Reporting to the Chief Information Officer, this role offers a unique opportunity to join our growing team, working for a successful, growing company with a recognised global brand and huge potential and vision. If you’re successful, you’ll be compensated with an attractive package which will be appropriate to your skills and experience. We also offer generous benefits, including a contributory pension and private dental / medical care and maternity package.

We understand that people work differently, so our employees can work flexibly around our core hours, and we expect some flexibility in return. We have introduced a hybrid work environment where employees combine working remotely and working from the office. You will therefore need to be able to commute to our Cambridge office for meetings as required.

How to apply

If you’d like to join RealVNC as a Information Security Compliance Officer, please click on the ‘apply for this job’ button and fill in your details.

RealVNC has a responsibility to ensure that all staff are eligible to live and work in the UK and if you’re invited to interview, you’ll be requested to provide proof of your eligibility to work.

RealVNC is an equal opportunities employer, committed to staff welfare and professional development.

Staffing and Recruitment Agencies

To all Staffing and Recruiting Agencies: Our website is only intended for individuals and preferred suppliers of RealVNC. Staffing and recruiting agencies and individuals being represented by an agency that is not a preferred supplier are not authorized to use this site or to submit profiles, applications or CVs, or to forward CVs directly to employees or any other company location, and any such submissions will be considered unsolicited.

RealVNC does not accept unsolicited CVs or applications from agencies other than preferred suppliers. RealVNC is not responsible for any fees related to unsolicited CVs or applications and explicitly reserve its right to contact candidates presented in such unsolicited CV or application.