Information Security Specialist

The Opportunity

Are you passionate about safeguarding information and driving secure practices in a dynamic global environment? At William Grant and Sons, we’re looking for an Information Security Specialist who will play a pivotal role in protecting our business and brands. This is your chance to join a team where innovation meets heritage, and where your expertise will help maintain the integrity of our iconic portfolio

.
What you will be doin

g
As an Information Security Specialist, you wi

• ll:Lead the design, implementation, and monitoring of robust information security measur
• es.Collaborate with cross-functional teams to identify and mitigate risks across business uni
• ts.Support the development and delivery of security awareness training to promote a strong security cultu
• re.Provide expert guidance on compliance with industry standards such as ISO 27001, NIST SP 800-53 and GD
• PR.Manage security assessments for third-party vendors, ensuring alignment with company values and standar
• ds.Play an integral role in projects involving sensitive data, ensuring security is embedded from the outs

et.
About

You
You are a proactive professional with a strong analytical mind and a passion for information secu

rity.
To excel in this role, you should

• have:Proven expertise in implementing and managing security frameworks such as ISO, NIST, and GDPR, ensuring compliance and robust security prac
• tices.Strong technical skills in designing, implementing, and operating security controls that align with organisational standards and objec
• tives.Demonstrated ability to create clear, high-quality technical documentation for complex security technol
• ogies.Exceptional problem-solving abilities, with the capability to translate technical concepts into actionable insights for diverse audi
• ences.Skilled at fostering collaboration within teams, inspiring colleagues, and contributing to shared objectives, plans, and continuous improvement initia
• tives.Proactive in supporting team development, driving continuous improvement, and aligning security objectives with organisational
• goals.Experience in designing, managing, and analysing phishing simulation exercises to enhance security awareness and res
• ponse.Experience with conducting third-party security re

views.
Desirable but not ess

• ential:Certifications such as CISM or equi
• valent.Experience with OT security frameworks (such as IEC
• 62443).Experience in the spirits or manufacturing in
• dustry.Experience working with Marketing and Brand
• teams.Performing GAP an
• alysis.Experience of reviewing penetration testing and vulnerability scanning results, and making recommend