Senior Cybersecurity Specialist (Compliance & Risk)

🏢 ABOUT THE COMPANY

CostCo Wholesale is a multinational American multinational retailer that operates a chain of membership-based warehouse clubs. Founded in 1983 by James Sinegal and Jeffrey H. Brotman, it has grown into one of the world's largest retailers, with over 800 warehouse clubs worldwide and a revenue of over $230 billion in 2022. At CostCo, we are known for our business model that combines low prices with high-quality products, and our company culture that values teamwork, integrity, and respect for our members and employees.

🎯 ROLE OVERVIEW

As a Senior Cybersecurity Specialist (Compliance & Risk), you will play a critical role in protecting CostCo's information assets from cyber threats, ensuring compliance with relevant regulations, and implementing risk management strategies to mitigate potential risks. You will work closely with our Information Technology team, Risk Management team, and business stakeholders to identify and address cybersecurity risks, develop and implement security policies and procedures, and provide guidance on security best practices.

📋 KEY RESPONSIBILITIES

Develop and implement cybersecurity policies, procedures, and standards to ensure compliance with relevant regulations and industry standards.

Lead the development and maintenance of the company's information security risk management framework, including risk assessment, threat analysis, and vulnerability management.

Collaborate with the IT team to ensure the security of CostCo's technology systems, including networks, servers, and applications.

Develop and maintain relationships with external cybersecurity vendors, including managed security service providers (MSSPs) and incident response teams.

Stay up-to-date with emerging cybersecurity threats and technological advancements, and provide recommendations for improving the company's cybersecurity posture.

Develop and deliver training programs for employees on cybersecurity awareness and best practices.

Conduct regular security audits and vulnerability assessments to identify and address potential security risks.

✅ REQUIRED QUALIFICATIONS

8+ years of experience in cybersecurity, with a focus on compliance and risk management.

Bachelor's degree in Computer Science, Cybersecurity, or a related field.

CISSP, CISM, or CISA certification.

Strong knowledge of relevant regulations, including GDPR, PCI-DSS, and HIPAA.

Excellent communication and project management skills.

⭐ PREFERRED QUALIFICATIONS

Master's degree in Cybersecurity or a related field.

Experience with cloud-based security platforms, including AWS and Azure.

Certification in a specific cybersecurity domain, such as cloud security or threat hunting.

Experience with security information and event management (SIEM) systems.

💰 WHAT WE OFFER

salary range £55,000 - £80,000 per annum.

Comprehensive health insurance and retirement plan.

25 days' paid annual leave, plus 8 bank holidays.

£1,000 annual learning and development budget.

Flexible remote work policy.

Collaborative and dynamic team culture.

Opportunities for career growth and professional development.

👥 ABOUT THE TEAM

Our cybersecurity team consists of experienced professionals who are passionate about protecting CostCo's information assets. We work closely together to identify and address cybersecurity risks, and we are committed to staying up-to-date with emerging threats and technological advancements. We are a collaborative and dynamic team that values teamwork, integrity, and respect for our members and employees.

📨 HOW TO APPLY

Please submit your application, including your resume and a cover letter, to our online portal. We expect to review applications on a rolling basis and conduct interviews within 2-3 weeks of receipt.

📋 Job Details

Job Type	🌐 Remote
Location	Remote, GB
Address	123 Main Street, London, GB, EC2M 7PG
Salary	GBP 55,000 – 80,000 / year
Industry	General
Company	CostCo
Valid Until	2026-10-13

📨 How to Apply

Submit your updated CV and a brief cover letter to CostCo. Applications are reviewed on a rolling basis. Only shortlisted candidates will be contacted within 2 weeks of applying.