Key Responsibilities

• Coordinate the maintenance of ISO 27001 compliance, audits, and documentation.
• Coordinate Cyber Essentials certification, gathering evidence and tracking remediation actions.
• Maintain accurate logs and reports for backup checks, access reviews, and other compliance processes.
• Produce reports and metrics for management on compliance status and risks.
• Track and assess third-party and supply-chain security risks.
• Build and run security awareness training plans, manage communications and security culture across the organisation.
• Provide governance input to IT and business projects, ensuring security requirements are considered from the outset.
• Manage the security and IT risk registers, chairing the monthly risk meeting and ensuring action and remediations as agreed
• Support business continuity, disaster recovery and major incident response and process.
• Support building a well-rounded security team, providing guidance and maturity across IT

Key Requirements

Skills & Experience

• 2-5 years' experience in IT, compliance, or data-related roles.
• Familiarity with Microsoft Azure and Entra ID from a compliance/security perspective.
• Exposure to security frameworks such as ISO 27001 or Cyber Essentials.
• Certifications (e.g., CompTIA Security+, ISO 27001 Lead Implementer, CISMP) either gained or being worked towards.
• Experience maintaining policies, evidence, risk registers or compliance documentation would be advantageous
• Strong attention to detail and documentation skills.
• Analytical mindset with the ability to author and interpret policies and standards.
• Effective communicator, able to explain security requirements across different teams.
• Organised and capable of handling multiple tasks simultaneously.
• Proactive, inquisitive and willing to develop knowledge across the wider cyber security discipline

Living The Company Values

By embedding our companies core values and purpose into each role, ensures that every employee, regardless of their role or level, understands how their individual development and contributions align with our purpose of ‘improving today for a better tomorrow'

Each role and value has an alignment to set proficiency levels and expectations; this role holder is expected to:

• Leading: Acts as a role model, shaping the learning agenda and influencing change
• Agile: Anticipates learning needs, adjusts quickly to changing operational contexts
• Nurturing: Supports the development of others through coaching and structured development plans
• Engaging: Inspires and motivates learners, builds trust and credibility
• Safe & Secure: Ensures all learning is aligned to safety and compliance standards

Your Contribution to the company

• Strive to be always positive and constructive
• Adhere to all company policies
• Straight talking about the facts of the situation - open discussions are the best way to find solutions
• Help others through communicating clearly
• Deliver on commitments
• Ensure that any ideas that may enhance the productivity or systems of the company are brought to the attention of Senior Management, or your colleagues
• Deliver our Company Values understanding that by working together in unity we are ‘Stronger Together'

Equality, Diversion & Inclusion

At Lanes Group, we are dedicated to fostering a diverse and inclusive workplace where everyone feels valued and empowered. We believe that our differences make us stronger and are committed to providing equal opportunities for all employees. We welcome and encourage applications from individuals of all backgrounds, including those from underrepresented groups. Join us in our commitment to creating a more inclusive and diverse world.