Security and Compliance Manager

Security and Compliance Manager

Neve Jewels System · London Office

Function: Technology

Reports To: CTO

Location: London

Employment Type: Full-Time

Experience: 10+ Years

Domain: Luxury Retail / Jewellery

01 ROLE OVERVIEW

Neve Jewels Group is a UK headquartered, digital-first jewellery company redefining modern luxury through made-to-order design, ethical craftsmanship, and global e-commerce across its brands: Diamonds Factory, Austen & Blake, and Sacet. Our values:

Celebrate the Moment: We honour life’s milestones by creating meaningful, joy-filled jewellery experiences.

Customer Centric Approach: Every decision starts with our customer, delivering personalised service at every step.

Earn Trust and Respect: We build trust through honesty, care, and respect in all relationships.

Experience Led Innovation: We blend tradition and innovation to enhance every jewellery experience.

Empathy for People/Planet: We act with compassion, sourcing ethically and operating sustainably.

Protecting our clients is as important as the quality of our diamonds. We’re looking for a security expert to lead the development and maintenance of our compliance framework. You’ll be the driving force behind our adherence to ISO27001, PCI-DSS, and GDPR, ensuring Neve Jewels remains a trusted leader in luxury retail. You’ll work hand-in-hand with our tech and business teams to embed security into our DNA, monitoring controls and providing the specialist advice needed to safeguard our digital and physical assets.

02 KEY RESPONSIBILITIES

• Security Architecture & Governance: Design, implement, maintain compliance and manage the Neve Jewels IT security framework, ensuring technical alignment with ISO27001

IT Compliance

• Audit Orchestration: Act as the primary lead for all internal and external IT audits; coordinate with department heads to gather evidence, manage auditor walkthroughs, and ensure zero "major non-conformities."
• Control Monitoring & Testing: Establish a continuous monitoring programme to test the effectiveness of IT controls (e.g., access reviews, backup logs, and encryption standards), providing regular "compliance health" reports to senior management.
• Policy Governance: Author and maintain the suite of IT policies and procedures (e.g., Acceptable Use, Incident Response, and Disaster Recovery), ensuring they are practical for a luxury retail environment and legally robust.
• Third-Party Risk Management (TPRM): Manage the IT compliance vetting process for all new vendors, ensuring high-value partners (from e-commerce platforms to cloud storage) sign and adhere to our security schedules.
• Remediation Tracking: Identify gaps in the technical landscape and work with the IT Infrastructure team to track and close out remediation plans, ensuring risks are downgraded within agreed SLAs.
• Asset & Identity Governance: Perform quarterly audits of user access rights and hardware inventories to ensure only authorised staff have access to Neve Jewels’ most sensitive financial and client data.
• Litigation & Discovery Support: Assist in technical investigations or Subject Access Requests (SARs) by ensuring data is archived and retrievable in a legally defensible manner.
• Compliance Training: Develop and deliver targeted training for the IT team on compliance obligations, ensuring every engineer understands their role in maintaining our certifications.

Data Protection

• Strategic Privacy Governance

03 REQUIRED SKILLS & EXPERIENCE

You are a seasoned Security and Privacy professional with a minimum of 5+ years of experience leading compliance and data protection programmes. You possess a unique 'triple-lens' capability: the technical expertise of an IT Security Manager, the methodical rigour of a Compliance Lead, and the legal authority of a Data Protection Officer (DPO).

With a strong understanding of ISO27001, PCI-DSS, and GDPR, you build resilient, frameworks that protect high-value assets and client trust. You are a pragmatic advocate for 'Privacy by Design', ensuring that every digital innovation at Neve Jewels is built on a foundation of ironclad security.

An exceptional communicator and strategic thinker, you have the gravitas to advise the Board of Directors on regulatory risk and the technical fluency to partner with IT Engineering teams. You are a self-starter who thrives on independence, acts with absolute discretion, and stays at the cutting edge of emerging cyber threats and shifting privacy legislation

04 PREFERRED QUALIFICATIONS

• Retail Cyber Defence:

05 WHY JOIN NEVE JEWELS

• Join a fast-growing business where your contributions matter and your ideas are valued
• Work in a supportive, transparent environment that encourages innovation and excellence

Our Commitment to Diversity & Inclusion

At Neve Jewels Group we are committed to providing a work environment that supports, inspires, and respects all individuals. We do not discriminate on the basis of gender, race, colour, religion, age, disability, belief, sexual orientation, marital status, or is disadvantaged by conditions or requirements which cannot be shown.