Cyber Compliance Manager

ABOUT TOSCA Tosca is a global leader in reusable packaging and pooling solutions that service the supply chain end to end. Re-use is the key word as Tosca facilitates moving away from single use packaging towards a circular model of reusable packaging with its robust portfolio of plastic containers, pallets, bins, crates and more. We focus on optimizing the flow of perishables, eliminating waste at every turn – product, packaging, labor and transportation waste. Our reusable plastic products improve the quality of product delivered, create more efficient supply chains, and are more sustainable than single-use packaging.

To strengthen our IT-department at our office in Dudley (UK), we are currently recruiting a driven Cybersecurity & Compliance Manager.

The Cybersecurity & Compliance Manager will lead Tosca’s efforts to ensure adherence to NIST CFS 2.This role focuses on developing security protocols, maintaining documentation, conducting risk assessments, and ensuring regulatory compliance. Responsibilities include managing security infrastructure, incident response, and promoting cybersecurity awareness. The position requires collaboration with Global IT, cross-functional teams, and third-party partners. Key qualifications include experience in cybersecurity and compliance, strong knowledge of NIST and ISO standards, risk management expertise, and effective communication skills.

This is a full-time role based in Dudley, UK, with travel up to 30% of the time.

Implement security protocols and manage information security programs
Report performance, exceptions, and outages to all audiences transparently.
Align disaster recovery with business continuity plans.
Ensure compliance with ISO27001, NIST CFS 2.Identify risks, develop a comprehensive security plan.
Oversee incident monitoring, detection, response via SOC and MSSPs.
Lead incident response and post-incident analysis.
Enforce policies for data privacy (GDPR & NIST).
Report service performance to stakeholders.
Coordinate with other Tosca functions for effective implementation.
Bachelor\’s degree in Computer Science, Information Technology, Information Security, or a related field; a Master\’s degree is preferred.
At least 7-10 years of experience in information security, specifically within security operations, with proven experience in a leadership or management role.
Relevant certifications such as CISSP (Certified Information Systems Security Professional), CISM (Certified Information Security Manager), or CISA (Certified Information Systems Auditor) are highly desirable.
Proficiency in risk management processes, vulnerability assessments, and incident response strategies.
Current technical and hands-on experience with security tools and technologies, including Rapid7, Rubrik, Sentinel, and endpoint protection solutions like Microsoft Defender.
Excellent analytical, problem-solving, and decision-making skills, with the ability to conduct post-incident analysis and implement corrective actions.
Ability to stay current with security trends, emerging threats, and best practices in the cybersecurity landscape.
You have expertise within Customer/Relationship Management.
You excel in conveying ideas clearly and effectively.
You possess specialized knowledge and skills in your field.
You think ahead and plan for long-term success.

You will have a permanent contract with a competitive remuneration package in line with your knowledge and experience.
We continuously invest in your personal and professional development through our training & coaching programs.
We take pride in our green service and encourage our employees to participate in our growth and help us co-define the path to success. Send us your CV and your letter of motivation in English. We value diversity and equal opportunity. Applicants are welcomed on the basis of their individual merits as we do not discriminate on the grounds of age, sex, disability, ethnic or racial origin, religion or belief, or sexual orientation. With both customers and employees around the world, we are committed to ensuring our team reflects the unique communities around us.