Information Security Officer

The Information Security Officer will join the IT department, reporting to the Information Security Compliance Manager. The role is responsible for delivering Formula 1's Information Security Governance, Risk, and Compliance (GRC) projects and activities. The position involves working across the business to support security compliance, risk management, and data governance.

• Lead in monitoring and managing compliance programmes aligned to security frameworks and regulations such as ISO 27001, PCI DSS, and GDPR, recognising improvements and encouraging efficiencies and automation to controls, evidence gathering, and processes.
• Support the definition and growth of Formula 1's Security Control Framework, taking a proactive approach to designing, assessing, and maintaining effective security controls across various business functions.
• Provide expertise in risk management and the identification and assessment of security risks, ensuring they are appropriately reported through dashboards, reports, and workshops.
• Create, review, and maintain security policies, standards, and procedures, ensuring they are applied across relevant technology projects, systems, and services.
• Support the management of third-party supplier security and compliance assessments, building relationships with key suppliers and outlining steps for security improvements where appropriate.
• Coordinate internal and external security audits and reviews through delivery, evidence gathering, and reporting.
• Work with stakeholders to support Formula 1's data governance and security strategy across data discovery, processing, storage, classification, retention, and disposal, and support the implementation and maintenance of security controls for the protection of data.
• Define and monitor security GRC-related performance metrics, communicating and presenting updates to senior stakeholders.
• Support Formula 1's approach towards the use of Artificial Intelligence, utilising tooling to ensure policies and procedures are adhered to.

• Experience of successfully leading information security GRC-focused programmes, including risk management activities.
• Experience in vendor/third-party audit and compliance management.
• Knowledge of security compliance and regulatory requirements, including ISO 27001, PCI DSS, and GDPR.
• Experience in incident response, business continuity, and disaster recovery (BC/DR) planning and testing.
• Experience in data governance and Data Loss Prevention (DLP) projects.
• Understanding of legal and regulatory frameworks relevant to information security, including planned future changes.
• Enthusiastic and passionate about driving security improvements across the company and wider industry.
• Ability to cope under pressure and manage multiple important projects simultaneously.
• Ability to communicate with different audiences, both technical and non-technical.
• Willingness to support Formula 1 events and schedules across different time zones on a rotational basis.
• Current UK driving licence.

• Security architecture, engineering, or operations experience.
• Understanding of security tools and technologies such as AV, SIEM, DLP, and CASB.
• CISSP or CISM qualification.
• ISO 27001 LI/LA qualification.

• Private Healthcare scheme
• Dental Care
• 4 x Grand Prix Paddock passes per season
• Enhanced maternity/paternity leave and other family planning policies
• A free staff shuttle service running to and from surrounding train stations near to Biggin Hill
• Free healthy snacks in the offices
• Subsidised canteen in Biggin Hill, serving breakfast and lunch
• 25 days annual leave and 8 Bank Holiday days, plus a Christmas period closure
• Opportunities to develop and request training for your role via the in-house Learning and Development team
• Discount on Formula 1 merchandise
• Discount at Formula 1's experiences including F1 Arcade and F1 Drive
• Perkbox benefit portal and more