DS Smith

Information and Technology Governance & Risk Lead

United Kingdom · Work style not stated · Full time

Apply on the employer’s site ↗See how well you match this job

You apply directly with the employer. ROLIVA does not submit applications from this page and is not the employer.

About the role

Description from the employer’s posting. Check the employer’s page for the current version.

  • EmployerDS Smith
  • LocationUnited Kingdom
  • Work styleWork style not stated
  • Employment typeFull time
  • Employer posted

I&T Governance and Risk Lead

About the role

Reporting to Head of I&T GRC, Governance and Risk Lead will be responsible for driving information and cyber security awareness, delivering security awareness training including phishing and facilitation of cyber scenario desktop simulations across central and manufacturing site teams.

You will review, manage and where required prepare responses to internal and external customer enquiries in relation to information and cyber security arrangements. You will support IT, procurement, legal, data protection and digital security and business stakeholder in relation to supplier information and cyber security due diligence and requirements.

As the successful candidate you will also lead risk-based party security assurance, management, and continuous improvement activities. In addition, facilitate and coordinate IT risk management risk register, tools, process, reporting and review. You will take responsibility for managing a subset of aspects of ISO 27001 related documentation and control activities.

Show full description

As the I&T Governance and Risk Lead you will have the responsibility of aspects of the I&T GRC scope, delegated and assigned by the Head of I&T GRC.

Key Accountabilities

  • Engage with key IT and business stakeholders in relation to:

o Risk management.

o Security awareness training.

o Facilitation of cyber scenario desktop simulations across central and manufacturing site teams.

o Customer security questionnaires.

o Supplier security reviews, risk management and requirements.

  • Manage and continuously improve I&T and Security risks processes in accordance with company risk appetite and tolerance, validating that risk is clearly articulated and management response is well defined.
  • Engage risk review and assurance activities across existing suppliers.
  • Provide IT and business advice on aspects of security standards and regulations such as ISO27001, NIST CSF, PCI DSS, NISD and NIS2.
  • Engage with I&T system owners to provide training in relation to information security, cyber resilience, phishing, and facilitation of cyber scenario desktop simulations across central and manufacturing site teams.

About you 

  • Working knowledge of technology and security standards, controls and consequences across both IT and manufacturing environments in manufacturing or similar industries.
  • Experience working with information security standards and frameworks such as and regulations such as ISO27001, NIST CSF, PCI DSS, NISD and NIS2.
  • Proven analytical, problem-solving, planning, project delivery and supplier work packages management skills.
  • Demonstrable experience of engaging across all levels of a company in relation to information and cyber security risks.
  • Working towards or achieved professional certifications (ISO27001 lead, ISC2, CISM or CRISC) advantageous.

About Us

We are DS Smith, together with International Paper, a global leader in sustainable packaging solutions and other fibre-based products. We believe a better, more sustainable tomorrow is possible with the right people who challenge and support one another to create positive change. Our colleagues across Europe, the Middle East, Africa and North America bring expertise across innovation, manufacturing, design, sales, sustainability, supply chain and technology. Together, we help our customers make the world safer, more productive and more sustainable.

"To fulfil our purpose of redefining packaging for a changing world, we aim to build a diverse, motivated and engaged workforce. Our goal is to create a culture of inclusion where everyone is treated fairly, differences are valued and everyone has an equal opportunity to succeed.

Our people come from diverse backgrounds, bringing different perspectives, ideas and experiences to generate unique solutions focused on present and future sustainability challenges. We welcome all candidates to apply, even those not meeting all criteria."

#LI-CP

Staying safe while you apply

  • Never pay to apply, interview or accept an offer. ROLIVA never asks you for payment to apply to a job.
  • Apply only through the official “Apply on the employer’s site” button, on the employer’s own site, and check that a recruiter’s email uses that employer’s own domain rather than a free email address.
  • Be cautious of an offer made with no real interview, or pressure to decide quickly or share financial details early.

Does something look wrong with this listing? Use “Report broken link” in the role details, or read ROLIVA’s full job-safety guidance ↗.

Preparing for this role with ROLIVA

  • Check the fit.

    Compare the requirements with the experience you have confirmed, including gaps.

  • Prepare honestly.

    Build interview stories and application drafts from your own evidence.

  • Keep track.

    Save the role and record your own application status and follow-ups.

Create a free workspace or log in.

At a glance

  • Employment typeFull time
  • SeniorityLead / Principal
  • Employer posted
  • Added to ROLIVA
  • Last checked

Explore similar roles

Similar jobs

DS Smith

Shift Engineer

United Kingdom

Work style not statedFull time

DS Smith

Account Manager

Poland

Work style not statedFull time