Senior Information Security Specialist in Birmingham

Main purpose of the job: Responsible for operating, maintaining, and continually improving Artifex Interior Systems' Information Security Management System (ISMS) in line with ISO 27001, TISAX, GDPR, and applicable customer and regulatory requirements. The role provides senior level expertise in information security, governance, risk management, and data protection, ensuring that related activities are effectively embedded across the organisation.

Responsibilities

• Develop, maintain, and communicate information security and data protection policies, standards, and procedures aligned with Artifex values, business objectives, and risk appetite.
• Contribute to the design and operation of governance processes to ensure security, data protection, and compliance requirements are consistently applied across the organisation.
• Ensure security related processes support right first time delivery, audit readiness, and sustainable compliance.
• Lead and support the information security and data protection risk management process, ensuring risks are identified, assessed, reviewed, treated, and escalated in line with policy.
• Lead or support internal and external audit activities (including ISO 27001, TISAX, and GDPR), ensuring findings, actions, and remediation plans are clearly defined and progressed to agreed timescales.
• Ensure clear, accurate, and audit ready compliance evidence is maintained, including GDPR Article 30 records and related documentation where required.
• Prepare clear and accurate reporting on ISMS performance, compliance status, significant risks, and emerging issues.

Preferred Skills And Experience

• Demonstrable experience operating and continually improving an ISMS aligned to ISO 27001, including certification cycles and assurance activities.
• Experience supporting or leading TISAX assessments or similar industry-recognised security frameworks.
• Strong working knowledge of GDPR, including data protection principles, data subject rights, DPIAs, retention, and breach management.
• Proven experience contributing to data protection and compliance programmes in complex organisations.
• Solid grounding in information security governance, risk management, and policy development.
• Strong business and commercial awareness, with the ability to align security and compliance activity to organisational objectives.
• Excellent communication and interpersonal skills, with the ability to influence, negotiate, and persuade stakeholders at different levels.
• Experience working across multiple teams and disciplines to deliver security, governance, or compliance outcomes.
• Ability to work independently, exercising judgement and leadership in all but the most complex situations.

Note: this is not an exhaustive list. All employees are expected to show flexibility and continued self-development to meet the ever-changing needs of the business.

Artifex is an equal opportunities employer and committed to eliminating discrimination and encouraging diversity amongst our workforce. Our aim is that our workforce will be truly representative of all sections of society and each employee feels respected and able to give their best. We oppose all forms of unlawful and unfair discrimination. We are committed to creating an environment in which individual differences and the contributions of all our staff are recognised.

If you’re interested in this role, click 'apply now' to forward an up-to-date copy of your CV with your contact details. If this job isn’t quite what you are looking for but you are looking for a new position within Automotive, please contact us for a confidential discussion on your career.