Information Security and Compliance Manager

Information Security and Compliance Manager

Join to apply for the Information Security and Compliance Manager role at Atcore

ATCORE is the leading international supplier of technology solutions for the leisure travel sector. With our market‑leading reservation and distribution platform, we empower travel businesses to meet the needs of travellers through our suite of bespoke solutions. Our customers range from large vertically integrated groups, through to smaller specialist operators who enjoy a variety of service offerings. We provide applications support, hosting support and monitoring to keep our customers running 24x7.

Our ATCOM software – built on the Oracle platform – is the beating heart of their business, the place where millions of holidays are created, found and booked. We have an exciting opportunity for an Information Security and Compliance Manager to join ATCORE in a key standalone position reporting directly to the CFO.

• Develop and execute a security strategy aligned with business and product objectives.
• Advise senior leadership on emerging threats, risk posture and security investments.
• Establish and maintain an information security governance framework.
• Ensure compliance with UK and international standards, including:
  • GDPR
  • PCI DSS
  • PCI 3DS
  • SOC 2
  • NIST 800‑61 r3
• Oversee internal and external audits and certification processes.
• Manage and complete security assessments for third parties, customers and insurance purposes.
• Work in partnership with the Legal team to define information security contractual requirements.
• Interact with customers to demonstrate compliance with legal and contractual requirements.
• Audit risk assessment activity and determine mitigation strategies.
• Manage third‑party and supply chain security risks.
• Work closely with engineering teams to integrate security into the software development lifecycle, define secure coding standards and oversee code review processes.
• Lead incident response and disaster recovery planning.
• Oversee vulnerability management, penetration testing and threat intelligence.
• Develop and enforce security policies and standards.
• Deliver security awareness training across the organisation.

• Degree in Computer Science, Cyber Security, or related discipline.
• 5+ years of experience in information security, including leadership roles.
• Professional certifications such as CISSP or CISM.
• Detailed understanding of GDPR.
• Strong knowledge of compliance frameworks (PCI DSS, PCI 3DS, SOC
  2).
• Knowledge of the DRATA GRC platform.
• Strategic thinking and ability to align security with business goals.
• Excellent communication and stakeholder engagement skills.
• Strong analytical and problem‑solving abilities.

We offer a wide range of benefits, including employer‑matched contributory pension scheme, business and personal travel insurance, healthcare schemes, life insurance and many more. We carefully recruit, retain and develop our most talented personnel and, as a result, have a uniquely low level of employee turnover of around 5%. Half of our employees have been with the company for 10 years or more, a level of longevity very rare in the technology sector.

Not Applicable

Full‑time

Other