Information Security & Compliance Manager

About Charlotte Tilbury Beauty

Founded in 2013 by world-renowned makeup artist and beauty entrepreneur Charlotte Tilbury CBE, Charlotte Tilbury Beauty has transformed the global beauty industry with one mission: to empower everyone, everywhere to look and feel like the most confident version of themselves. With our easy-to-use, easy-to-choose, easy-to-gift icons, we’ve become one of the most talked-about beauty brands on the planet - and the magic is only growing.

Today, we’re a global beauty phenomenon, scaling at record speed across 50+ markets with over 3,000 Dream Team members bringing the Tilbury magic to life every single day. Across the world, our Retail Teams and Magic Offices work hand-in-hand to shape the Charlotte Tilbury experience - from the glamour of London and the style capitals of Europe, to the energy of the Americas, the vibrant beauty hubs of the Middle East and the fast-growing innovation centres across APAC. Every region brings its own sparkle, culture and community, creating the unmistakable magic of Team Tilbury.

We’re bold. We’re disruptive. We’re powered by creativity, innovation and industry-leading tech. And as we continue to break records across countries, channels and categories, we’re looking for extraordinary talent to join us. About the role

Security and Compliance are critical business functions within Charlotte Tilbury. As a company that deals with a large volume of sensitive customer data, it is imperative that we adhere to modern security standards and remain compliant with the relevant regulations in each region we operate. Equally, the protection of our intellectual property and the productivity of our teams is essential to our continued success.

The Information Security and Compliance Manager will be responsible for developing and overseeing control systems to prevent or deal with breaches of data security and privacy. You will also evaluate the efficiency of these controls and improve them continuously. You will collaborate with the IT department, the Legal department, and other stakeholders to monitor and enforce compliance standards and regulations. You will also provide guidance and training on information security matters and best practice to employees and partners of the business.

As a Information Security & Compliance Manager you will

Policy, Process and Documentation

·Coordinate the development of best practice policies and standards related to IT security and data processing.

·Ensure that all policies and standards are regularly reviewed and updated to be in line with regulatory and control requirements.

Security Operations

·Be accountable for technical security controls including EDR, SIEM, DLP, SSE/SWG, CSPM, vulnerability management, identity security and endpoint compliance ensuring it is fit for purpose and being used to its full potential.

·Partner with and challenge Technology Operations on secure design, implementation and operational support of workplace, identity and endpoint technologies.

·Define and maintain build standards for Windows, MacOS, Android and iOS devices.

·Define security and compliance standards for cloud hosting environments, including AWS and GCP.

·Oversee penetration testing, bug bounty programs and red team exercises.

·Investigate security events and contain incidents in a timely manner.

Compliance

·Manage and oversee technology risk management activities

·Identify areas of non or weak compliance and drive improvement. This could be related to process, system security, documentation or any aspect of security/compliance.

·Develop and implement relevant security and compliance reporting to management and risk committees.

·Develop and manage an information security risk register to address risk issues and action plans from all sources.

·Coordinate information security internal audit and participate in external audits

·Collaborate with the IT department, the Legal department, and other stakeholders to monitor and enforce the compliance standards and regulations.

·Take ownership of vendor assessments, third party risk assessments and supply chain vulnerabilities

Awareness

·Develop and lead information security awareness and training initiatives, including phishing exercises and compliance training.

· Maintain an up-to-date understanding of emerging trends in information security risks, and new techniques and trends, in-line with overall information security objectives and risk tolerance.

Who you will work with

• Reporting into the Technology Operations Director
• Lead the Information Security team, consisting of two direct reports.

About you

• Experience in managing Cyber Security and Compliance positioning for an enterprise organisation
• Practical experience delivering hands on security improvements

• An understanding of relevant security and regulations (e.g. GDPR, CCPA, ISO27001, PCI-DSS)

• Customer focussed approach

• Effective communicator with ability to adapt style for intended audience

• Capable of managing the relationship with 3rd party service providers

• Highly organised and able to prioritise workload effectively

• Pro-active and able to work off your own initiative.

• Able to influence and communicate your own point of view

• Creative and unorthodox thinker, able to push projects forward in an unstructured environment.

• Methodical, logical, organised and calm under pressure

• Excellent English written & verbal skills.

Charlotte Tilbury is a fast-paced, dynamic and ever-evolving environment where agility, ambition and a passion for excellence help our teams thrive. We look for people who want to grow, innovate and be part of a truly global #DreamTeam.

While we outline the experience and skills we believe set candidates up for success, they’re a guide - not a barrier. If you can demonstrate the capabilities needed for the role, we’d love to hear from you, whether you have more or less experience than listed.

Why join us?

• Be a part of this values driven, high growth, magical journey with an ultimate vision to empower everyone, everywhere to be the best version of themselves

• We’re a hybrid model with flexibility, allowing you to work how best suits you

• 25 days holiday (plus bank holidays) with an additional day to celebrate your birthday

• Inclusive parental leave policy that supports all parents and carers throughout their parenting and caring journey

• Financial security and planning with our pension and life assurance for all

• Wellness and social benefits including Medicash, Employee Assist Programs and regular social connects with colleagues

• Bring your furry friend to work with you on our allocated dog friendly days and spaces

• And not to forget our generous product discount and gifting!

At Charlotte Tilbury Beauty, our mission is to empower everyone, everywhere, to feel like the most beautiful and confident version of themselves. We bring this to life by welcoming people from diverse backgrounds, cultures, identities, and perspectives into our global team. A workforce that reflects the world around us helps us better serve our communities, our customers, our colleagues, and every candidate who takes part in our recruitment process.

Want a closer look at life at Charlotte Tilbury Beauty? Follow our LinkedIn page! For updates, stories, and behind-the-scenes moments.