Overview
This role will focus on owning, operating, and maturing Mountain Warehouse’s cyber security frameworks and associated policies and toolsets, ensuring our ability to safeguard our people, and business.
The role reports to the CTO.
What you'll be doing
- Own and manage the cyber and information security governance lifecycle, including creation and gaining assurance of all cyber and information security policies and standards
- Regularly produce full gap analysis reports on areas of improvement and risk, recommending thorough mitigation plans including justification for options considered
- Ensure SDLC, Business Change and IT change management processes mature to deliver mandatory cyber and information security outcomes
- Work with IT, and business teams in planning, process mapping, documentation and testing of cyber-focused elements of Crisis Management, Business Continuity and Disaster Recovery
- Drive Mountain Warehouse’s cyber and information security culture, acting in an ambassadorial role across the business, able to communicate to all levels of staff
- Show an aptitude for reporting & communicating complex information security concepts to technical and non-technical audiences
- Independently able to produce comprehensive write ups of current risks and threats as they develop, producing expedient updates as situations change and span different threat vectors
- Proactively monitor and inform executive stakeholders on emerging cyber risks and threats, providing a view through a business lens on potential impacts
- Own the creation and presentation of cyber and information security performance against governance frameworks and risk appetite
- Be the main point for collation, reporting, communication, and closure of cyber security incidents, responsible for providing expedient, non-technical, business-focused updates in consumable format for senior management.
- Robustly challenge and own changes from a cyber security perspective, working with IT teams to provide expertise and implementation
We'd love to meet someone with
- Excellent communication skills with the ability to target messages appropriately for Executives, Business Management, IT management, and IT staff team members
- Aptitude for presenting complex cyber security concepts, tailoring the message to suit multiple audiences
- Ability to respond to business challenge on both risk and technical concepts
- Experience in design, development, and installation of cyber security tooling
- Experience in cyber incident response, including managing incidents through an incident response framework
- Ability to work independently within a defined remit, managing schedule and multiple objectives with minimal oversight
- Ability to manage multiple tasks simultaneously and adjust to changing priorities
- Ability to work well with other people at all job position levels is essential
- Possess a working understanding of industry standard frameworks and standards such as Cyber Essentials Plus, PCI DSS, CIS, COBIT, ITIL, ISO27001
- Knowledge of Technology Recovery mechanisms
- CISSP or CISM certifications
What’s in it for you?
- Competitive salary and benefits package
- Holiday allowance
- 50% staff discount & 25% for family and friends
- Pension scheme
In 1997, we launched Mountain Warehouse to make the outdoors accessible to everyone by offering value for money product and exemplary customer service.
The outdoor industry had become very jargon heavy and we wanted to create a brand that would cater to our mothers and our neighbour’s kids as well as seasoned professionals who understood the technology.
Our expansion since then has seen the brand grow and the product evolve, but the small family business that makes MW special has remained. Great product is at the heart of everything we do.
As we expand internationally we employ a team of dedicated diverse people to offer our valued customers the best possible experience when visiting our stores, shopping online and putting our range through its paces.
Welcome to our journey.