Information Security Specialist

Job Introduction

Are you an Information Security Specialist who can work as part of a proactive team to prevent and react to security risks? Would you like to contribute to the continued success of the largest family-owned Whisky distillery in the Scotland, responsible for iconic brands including: Glenfiddich, The Balvenie, Hendricks Gin, and Reyka Vodka?

William Grant & Sons are currently seeking a highly skilled and motivated Information Security Specialist to join our dynamic team. As an Information Security Specialist, you will play a pivotal role in safeguarding our organisation's sensitive information and ensuring the confidentiality, integrity, and availability of our data. If you are passionate about cybersecurity and possess a strong technical background, we invite you to apply and contribute to our commitment to maintaining a secure and resilient information environment.

Main Responsibility

As an Information Security specialist, you'll be at the heart of our Group Technology Services team, who ensure that William Grants & Sons have good practices and controls in place to protect our information and information systems. Using your experience and knowledge, you will engage with technical and non-technical stakeholders across the business to ensure that security risks are identified and managed in accordance with our Information Security policies.

Policy and Compliance

• Develop and enforce information security policies and procedures.
• Ensure compliance with relevant regulations and industry best practices.

Risk Assessment and Mitigation

• Conduct risk assessments to identify potential vulnerabilities and threats.
• Implement measures to mitigate identified risks and improve overall security posture.

Security Awareness and Training

• Provide security awareness training to staff and promote a security-conscious culture.
• Stay current with industry trends and emerging threats to continually enhance security protocols.

Security Audits and Testing

• Conduct regular security audits and vulnerability assessments.
• Perform penetration testing to identify and address potential weaknesses in the system.

Collaboration and Communication

• Collaborate with IT and cross-functional teams to integrate security measures into projects and daily operations.
• Communicate effectively with stakeholders, keeping them informed of security risks and mitigation strategies.

Information Security Project Engagement

• Engage with technical and non-technical projects to ensure that Information Security requirements are identified and met.
• Identify project risks and escalate where appropriate.

Risk Management

• Identify risks which come as a result of audits and engagement and where there is a non-compliance to the Information Security policies.
• Ensure that Information Security risks are managed and successfully tracked through to remediation working with the GTS Risk Manager.

Third Party Assurance

• Experience in vetting third parties to ensure that they meet William Grant & Sons Information Security expectations.
• Able to identify and interpret when third party assurance activities are required and feed into other processes such as DPIA's and risk assessments.

Our Ideal Candidate

• Degree qualified in cyber security, computing science or relevant work experience in  an IT or information security related role.
• Skilled in one or more of the following - Microsoft Office 365 configuration & troubleshooting - Microsoft Office 365 Advanced Threat Protection - Microsoft Windows Advanced Threat Protection - Microsoft Active Directory - Cisco internetworking including routers, switches and ASA series firewalls.
• Strong understanding of TCP/IP inter-networking and troubleshooting - Interpretation and Handling of Penetration Testing Exercises and Findings Experience of Windows 10 enterprise deployment and support, including appropriate support tools.
• Able to demonstrate a good understanding of common information security vulnerabilities, threats and controls.
• Experience in working with an Information Security policy framework and awareness of one or more of the more relevant Information Security frameworks such as NIST SP800-53, ISO27001 or CIS.
• CISSP, CISM, CRISC or other relevant security qualification desirable Comfortable with dealing with stakeholders at all levels within the business.
• Experienced in Information Security project engagement.
• Understands and can interpret Information Security policies and apply them to identify risks and escalate where appropriate.

What we can offer you

• We offer a competitive salary and benefits which are designed to promote our employees financial wellbeing. Employees are also eligible to participate in a bonus plan.
• Our employees enjoy a generous holiday entitlement and an opportunity to ‘buy’ or ‘sell’ some holiday entitlement.
• Private Healthcare and Doctor@Hand (remote GP service).
• Our employees can join a defined contribution pension plan. Employees contribute either 4% or 5% of salary, the company contributes 8% or 10% depending on the employee contribution. Employee contributions can be made through salary sacrifice.
• Our Employee Assistance Programme offers practical, impartial support on everyday matters ranging from medical, financial and legal to home and family issues. 
• Our Life Assurance cover is a multiple of eight times your annual basic salary.
• Product allocation so that you can enjoy our fantastic portfolio of brands.
• Our Cycle to Work scheme allows you to hire a bike for an agreed length of time, and then snap it up for a fraction of its original value. All while making savings (at least 25%) and spreading the cost.
• Every employee has the opportunity to claim up to £1,000 per year for a charity or charities for which they have raised money, volunteered their time or personally donated.
• Learning resources to help you be your best self.

About William Grant & Sons

A HOME FOR RARE CHARACTERS

William Grant & Sons: a home where Rare Characters thrive.

We value every employee for their rare character, distinctive skills, experience and perspectives. Every one of our colleagues has a role to play in helping us to achieve our growth ambitions.

At William Grant & Sons, our vision is to be A home where rare characters thrive. We value all colleagues for their rare character, distinctive skills, experience and perspectives. Diversity & Inclusion is at the heart of how we do things at William Grant & Sons, fully aligned to our purpose and our company values. We strive to create an environment where we can all be our best and bring our whole selves to work.

OUR AGILE WORKING PHILOSOPHY

Our agile working philosophy is to “Have your best work day everyday”.
Built on trust, we empower our rare characters to have their best work day every day. Where flexibility and positive working experiences help employees to feel connected and release potential across our teams.
We are open to discussing possible agile/flexible working options as part of the recruitment process.

INCLUSIVE RECRUITMENT PROCESS

Diversity & Inclusion is at the heart of how we do things at William Grant & Sons, fully aligned to our purpose and our company values. We want to ensure that our recruitment process is inclusive.