Job Introduction

Do you lead the way?  

Are you a grafter?  

Are you loyal?  

If yes, read below to see how you could be a part of our story!  

Welcome to Card Factory - and your opportunity to be part of our exciting future. As the country’s largest, independent gift and greetings card retailer with over 1000 stores, Card Factory is really thriving. As well as being a progressive, exciting and friendly company, we reward our people’s commitment and determination.

As a member of the IT Leadership Team the Head of Cyber Security will be responsible for ensuring the security and compliance of Card Factory digital assets.  This is a high profile role requiring self-motivation and drive to understand the cyber threat landscape and formulate mitigation action plans to reduce the risk.  Stakeholder management at a senior level will be key to the success of the role as will the ability to effectively articulate complex technical issues to a non-technical audience.

Role Responsibility

• Define and implement a cyber-security risk framework, aligned to industry best practise.
• Be responsible for identifying, monitoring and managing Cyber threats to the business
• Engage with relevant 3^rd parties to perform an annual cyber security audit, reviewing outputs and defining and executing action plans to mitigate risk.
• Be the advocate for cyber security and ensure security awareness training is delivered throughout the organisation.
• Ensure new systems are properly assessed for cyber risks through Penetration testing.
• Ensure existing systems are adequately protected against cyber-attack working with colleagues across the business and 3^rd party providers.
• Be the custodian of the cyber security policy, communicating it to colleagues and driving adherence.
• Keep abreast of cyber security threats and solutions and recommend improvements to keep our assets secure.
• Provide leadership to the Security Team including 1:1;s, objective setting, performance reviews, personal development plans etc
• Engage with key stakeholders in our business who may be more likely to be targeted to ensure they remain informed and aware of the cyber threat.
• Be a key member of the IT Leadership Team, ensuring cyber security is effectively represented.
• Ensure Security Team representation at Change Approval Boards to review and assess security risks of proposed IT changes.
• Responsible for the management and delivery of Cyber Security projects, including governance, risk and compliance
• Provide advice to the business on cyber security matters to ensure continued safety of the business systems.

The Ideal Candidate

• Proven track record of operating in a senior cyber security role preferably in a multi-channel retail environment.
• Strong understanding of Cyber technologies including hands on experience of delivering front line cyber defences to an organisation
• Excellent verbal and written communication skills; including communicating with technical and non-technical audiences at all organisational levels.
• Proactive individual with a high level of commitment to improve cyber security  
• Strong planning and organisational skills.
• Ability to articulate complex detail in a digestible and audience-appropriate manner
• Strong leader who feels equally comfortable working with technical teams and the Executive Board.
• Knowledge of the Data Protection Act 2018 and the General Data Protection Regulation (GDPR)
• Holds industry recognised certification in Cyber Security (e.g. CISM, CISSP or CISA)

About the Company

In return we offer a wide range of benefits to support your physical, mental and financial wellbeing.

• 25 holidays + 8 bank holidays
• Save as you Earn scheme
• 15% Staff Discount
• Discounted Gym Memberships
• O2 open mobile contracts
• Salary Finance
• Pension 
• Discounted Car Leasing
• Employee Care
• Flex My Day
• Card Factory Foundation
• MyCardFactory App: discounts at leading retailers

For this role we will also offer

• Private medical insurance
• Death in service benefit
• Eligibility for the Company bonus scheme

This role may involve out of hours and weekend working to support the business needs and the ideal candidate will hold a full clean driving license as travel between group sites will be required.

This is an exciting role with genuine prospects for the right candidate. If this role describes you and your career aspirations, click apply now.

Visit our website to see the products we sell at https://www.cardfactory.co.uk/

For any questions email: vacancies@cardfactory.co.uk (we do not accept CVs/Applications via email) 

We reserve the right to close this vacancy once sufficient suitable applications have been received. We advise applying early to avoid disappointment as applications will be reviewed regularly. 

No agencies please.

Sportswift Ltd T/A cardfactory