Job of the day

Field Service Engineer

Reading, UK | Full Time

Chief Information Security Officer

Edinburgh |

The Zonal group are one of the UK’s largest technology providers to the hospitality industry. ...

The Zonal group are one of the UK’s largest technology providers to the hospitality industry.
Our products are used by over 16,000 pubs, restaurants and hotels.  Customers include national brands like Pizza Express, Greene King and All Bar One. 
                                           
We provide our customers with the solutions they need to make their business a success. 
These solutions include mobile apps for ordering and web apps for engaging with consumers either through loyalty or reservations. By linking these solutions to Zonal’s EPoS (till) system, we help hospitality brands to understand their customers’ behaviour and preferences, enabling them to excel in an increasingly competitive market. 

If you have booked a table or hotel room, ordered, and paid for food and drinks, received loyalty offers, or downloaded your favourite hang out’s app, you will likely have used a Zonal product.

We are a family business with Scottish roots. We operate from our modern head office in Edinburgh, our Midlands office in Stafford and our Innovation Centre in Abingdon.

What you’ll do

The Chief Information Security Office (CISO) role reports directly to exec board level (via the Chief Technology Officer) and covers strategic oversight of anything and everything to do with IT Security in our organisation. This will include strategic vision, scoping of requirements, design, development, implementation, incident response, budgets and adherence to all necessary protocols, regulations and any legal requirements.  You will be the process owner of all assurance activities related to the availability, integrity and confidentiality of customer, business partner, employee and business information in compliance with our organization's information security policies.
 
  • Develop, implement and monitor a strategic, comprehensive enterprise information security and IT risk management program.
 
  • Working with executive management to determine acceptable levels of risk for our organization and facilitate risk assessment and risk management processes.
 
  • Develop and enhance an information security management framework.
 
  • Establishing and maintaining a corporate-wide information security management program to ensure that information assets are adequately protected.
 
  • Leading a small team of Security professionals that are responsible for assisting in executing all accountabilities.  Manage all aspects of your staff’s technical and personal development, new hires, dispute resolution and any HR processes.
 
  • Responsible for allocating resources to ensure that staff deliver secure and robust IT solutions to any of the organisations identified and agreed requirements.
 
  • Strategic planning, leadership, staff development, training and adherence to all legal, compliance and regulatory requirements.
 
  • Ownership of all processes and procedures improving the security and robustness of our organisations infrastructure, IT projects and associated systems.
 
  • Identify and safeguard our organisation from all known and developing security threats, security weaknesses, software bugs and exploits.
 
  • Overseeing our organisations current Data, IT and Information Security and any new software or hardware modifications impacting upon overall data security.
     
  • Overseeing planning and execution of necessary vulnerability audits, penetration testing or forensic IT audits and investigations. Ensure that outputs improve your organisations IT Security.
 
  • Liaise with senior level directors, the organisations board and other key stakeholders to demonstrate the current and increasing security posture of our organisation through well-defined KPIs.
 
  • Oversee staff training in all the latest security awareness skills, check associated protocols, methodologies and procedures are implemented.  Ensure our Secure Software Development processes are documented and adhered to.
 
  • Ensure compliance with any related legislation, such as the Data Protection Act, GDPR, ISO standards and PCI, or relevant government regulations.
 
  • Delegated responsibility from Executive Management for compliance with applicable PCI DSS requirements and for the effective delivery of P2PE services with the support from internal stakeholders.
 
  • Plan budget allocations and associated financial forecasts relating to IT, Data and Information security.
 
  • Liaise with and manage your partners, stakeholders, vendors, and third-party service or solutions providers.  Ensure an effective vendor management system is in place from a security perspective, liaising with our Legal team in order to effectively and safely on-board new suppliers.
 
  • Assist with the overall business technology planning, providing a current knowledge and future vision of technology and systems.
 
  • Oversight of the day-to-day control of the maintenance and monitoring of our live production environments (SaaS and hosted environments) to ensure necessary Information Security mechanisms are in place.

Who you are

You will have a background working within the IT Security domain with a solid technical foundation and a clear passion for all aspects related to Security.  You will have a demonstrable track record of performing a similar role within a similar organisation to Zonal, safeguarding our corporate and hosted application landscapes.  You will live, sleep, eat and breathe Security and act as an evangelist within our organisation.

It goes without saying you will have an in-depth and thorough understanding of the technology solution landscape that comes together to enable Zonal to provide world class solutions to the hospitality industry.  You will bring extensive industry, domain and regulatory experience to bear to drive this area of our organisation forwards.
 
  • A good leader.
  • Outstanding written and verbal communication skills.
  • Good understanding of all current legislation and regulations pertaining to your organisation.
  • Successful track record of effective coordination, prioritization, collaboration, organisation and project delivery.
  • Experience in financial forecasting and budget allocation.
  • Knowledge of relevant IT Security related hardware, software and vendor solutions.
  • An overall understanding of source code programming languages, such as C#, C++, .NET, Java, Perl, PHP, Delphi, ColdFusion etc. that our teams use.
  • Practical experience surrounding the security aspects of public and private facing hosted software in virtualised co-lo data centre environments.
  • Deep thinking analytical mind with the ability to quickly get to the root cause of issues.
  • You will need to be organised, efficient and able to work unsupervised under your own initiative.
  • As a natural, confident, and clear communicator you will have significant experience liaising with technical and non-technical teams and across organisational boundaries.
  • You will bring exceptional organisational skills to bear along with significant previous experience of line managing varied and complex teams of technologists to deliver through others.
  • You will be experienced in communicating with support staff, delivery team members and C-Level executives (both internal and external to Zonal) and know how to tailor your communications to the audience.
  • You will be motivated by getting things done, and getting them done in the right way, first time; you are laser focussed on achieving the best outcome.
  • As a valued Senior Manager within the business, you be aware of the business and commercial pressures relevant to your teams, your dynamic leadership skills will pragmatically balance delivery against the pressure – you realise that we don’t always operate in a perfect world and it will be necessary for you to make difficult decisions from time to time.
  • You will have experience of rapid business changes and be able to keep your team motivated, energised and on track through these periods.
  • Using your communication skills, you will keep key stakeholders aware of progress against plans and help mitigate risks. You will understand that the identification of risks and issues is not enough – when escalating you will provide recommendations and solutions.
  • Being accountable for delivery of multiple projects and those factors which make delivery successful or unsuccessful, you will use this knowledge to ensure positive outcome and build a track record of delivering software releases on time and within budget

What we value

Passion, Teamwork, Innovation, Professionalism, Accountability and Customer Obsessed are the values we believe make us the company we are. We’re looking for someone who understands great culture and will help us shape it as it evolves.

Job of the day

Chief Information Security Officer

Edinburgh |

The Zonal group are one of the UK’s largest technology providers to the hospitality industry. ...

The Zonal group are one of the UK’s largest technology providers to the hospitality industry.
Our products are used by over 16,000 pubs, restaurants and hotels.  Customers include national brands like Pizza Express, Greene King and All Bar One. 
                                           
We provide our customers with the solutions they need to make their business a success. 
These solutions include mobile apps for ordering and web apps for engaging with consumers either through loyalty or reservations. By linking these solutions to Zonal’s EPoS (till) system, we help hospitality brands to understand their customers’ behaviour and preferences, enabling them to excel in an increasingly competitive market. 

If you have booked a table or hotel room, ordered, and paid for food and drinks, received loyalty offers, or downloaded your favourite hang out’s app, you will likely have used a Zonal product.

We are a family business with Scottish roots. We operate from our modern head office in Edinburgh, our Midlands office in Stafford and our Innovation Centre in Abingdon.

What you’ll do

The Chief Information Security Office (CISO) role reports directly to exec board level (via the Chief Technology Officer) and covers strategic oversight of anything and everything to do with IT Security in our organisation. This will include strategic vision, scoping of requirements, design, development, implementation, incident response, budgets and adherence to all necessary protocols, regulations and any legal requirements.  You will be the process owner of all assurance activities related to the availability, integrity and confidentiality of customer, business partner, employee and business information in compliance with our organization's information security policies.
 
  • Develop, implement and monitor a strategic, comprehensive enterprise information security and IT risk management program.
 
  • Working with executive management to determine acceptable levels of risk for our organization and facilitate risk assessment and risk management processes.
 
  • Develop and enhance an information security management framework.
 
  • Establishing and maintaining a corporate-wide information security management program to ensure that information assets are adequately protected.
 
  • Leading a small team of Security professionals that are responsible for assisting in executing all accountabilities.  Manage all aspects of your staff’s technical and personal development, new hires, dispute resolution and any HR processes.
 
  • Responsible for allocating resources to ensure that staff deliver secure and robust IT solutions to any of the organisations identified and agreed requirements.
 
  • Strategic planning, leadership, staff development, training and adherence to all legal, compliance and regulatory requirements.
 
  • Ownership of all processes and procedures improving the security and robustness of our organisations infrastructure, IT projects and associated systems.
 
  • Identify and safeguard our organisation from all known and developing security threats, security weaknesses, software bugs and exploits.
 
  • Overseeing our organisations current Data, IT and Information Security and any new software or hardware modifications impacting upon overall data security.
     
  • Overseeing planning and execution of necessary vulnerability audits, penetration testing or forensic IT audits and investigations. Ensure that outputs improve your organisations IT Security.
 
  • Liaise with senior level directors, the organisations board and other key stakeholders to demonstrate the current and increasing security posture of our organisation through well-defined KPIs.
 
  • Oversee staff training in all the latest security awareness skills, check associated protocols, methodologies and procedures are implemented.  Ensure our Secure Software Development processes are documented and adhered to.
 
  • Ensure compliance with any related legislation, such as the Data Protection Act, GDPR, ISO standards and PCI, or relevant government regulations.
 
  • Delegated responsibility from Executive Management for compliance with applicable PCI DSS requirements and for the effective delivery of P2PE services with the support from internal stakeholders.
 
  • Plan budget allocations and associated financial forecasts relating to IT, Data and Information security.
 
  • Liaise with and manage your partners, stakeholders, vendors, and third-party service or solutions providers.  Ensure an effective vendor management system is in place from a security perspective, liaising with our Legal team in order to effectively and safely on-board new suppliers.
 
  • Assist with the overall business technology planning, providing a current knowledge and future vision of technology and systems.
 
  • Oversight of the day-to-day control of the maintenance and monitoring of our live production environments (SaaS and hosted environments) to ensure necessary Information Security mechanisms are in place.

Who you are

You will have a background working within the IT Security domain with a solid technical foundation and a clear passion for all aspects related to Security.  You will have a demonstrable track record of performing a similar role within a similar organisation to Zonal, safeguarding our corporate and hosted application landscapes.  You will live, sleep, eat and breathe Security and act as an evangelist within our organisation.

It goes without saying you will have an in-depth and thorough understanding of the technology solution landscape that comes together to enable Zonal to provide world class solutions to the hospitality industry.  You will bring extensive industry, domain and regulatory experience to bear to drive this area of our organisation forwards.
 
  • A good leader.
  • Outstanding written and verbal communication skills.
  • Good understanding of all current legislation and regulations pertaining to your organisation.
  • Successful track record of effective coordination, prioritization, collaboration, organisation and project delivery.
  • Experience in financial forecasting and budget allocation.
  • Knowledge of relevant IT Security related hardware, software and vendor solutions.
  • An overall understanding of source code programming languages, such as C#, C++, .NET, Java, Perl, PHP, Delphi, ColdFusion etc. that our teams use.
  • Practical experience surrounding the security aspects of public and private facing hosted software in virtualised co-lo data centre environments.
  • Deep thinking analytical mind with the ability to quickly get to the root cause of issues.
  • You will need to be organised, efficient and able to work unsupervised under your own initiative.
  • As a natural, confident, and clear communicator you will have significant experience liaising with technical and non-technical teams and across organisational boundaries.
  • You will bring exceptional organisational skills to bear along with significant previous experience of line managing varied and complex teams of technologists to deliver through others.
  • You will be experienced in communicating with support staff, delivery team members and C-Level executives (both internal and external to Zonal) and know how to tailor your communications to the audience.
  • You will be motivated by getting things done, and getting them done in the right way, first time; you are laser focussed on achieving the best outcome.
  • As a valued Senior Manager within the business, you be aware of the business and commercial pressures relevant to your teams, your dynamic leadership skills will pragmatically balance delivery against the pressure – you realise that we don’t always operate in a perfect world and it will be necessary for you to make difficult decisions from time to time.
  • You will have experience of rapid business changes and be able to keep your team motivated, energised and on track through these periods.
  • Using your communication skills, you will keep key stakeholders aware of progress against plans and help mitigate risks. You will understand that the identification of risks and issues is not enough – when escalating you will provide recommendations and solutions.
  • Being accountable for delivery of multiple projects and those factors which make delivery successful or unsuccessful, you will use this knowledge to ensure positive outcome and build a track record of delivering software releases on time and within budget

What we value

Passion, Teamwork, Innovation, Professionalism, Accountability and Customer Obsessed are the values we believe make us the company we are. We’re looking for someone who understands great culture and will help us shape it as it evolves.

Job of the day

Chief Information Security Officer

Edinburgh |

The Zonal group are one of the UK’s largest technology providers to the hospitality industry. ...

The Zonal group are one of the UK’s largest technology providers to the hospitality industry.
Our products are used by over 16,000 pubs, restaurants and hotels.  Customers include national brands like Pizza Express, Greene King and All Bar One. 
                                           
We provide our customers with the solutions they need to make their business a success. 
These solutions include mobile apps for ordering and web apps for engaging with consumers either through loyalty or reservations. By linking these solutions to Zonal’s EPoS (till) system, we help hospitality brands to understand their customers’ behaviour and preferences, enabling them to excel in an increasingly competitive market. 

If you have booked a table or hotel room, ordered, and paid for food and drinks, received loyalty offers, or downloaded your favourite hang out’s app, you will likely have used a Zonal product.

We are a family business with Scottish roots. We operate from our modern head office in Edinburgh, our Midlands office in Stafford and our Innovation Centre in Abingdon.

What you’ll do

The Chief Information Security Office (CISO) role reports directly to exec board level (via the Chief Technology Officer) and covers strategic oversight of anything and everything to do with IT Security in our organisation. This will include strategic vision, scoping of requirements, design, development, implementation, incident response, budgets and adherence to all necessary protocols, regulations and any legal requirements.  You will be the process owner of all assurance activities related to the availability, integrity and confidentiality of customer, business partner, employee and business information in compliance with our organization's information security policies.
 
  • Develop, implement and monitor a strategic, comprehensive enterprise information security and IT risk management program.
 
  • Working with executive management to determine acceptable levels of risk for our organization and facilitate risk assessment and risk management processes.
 
  • Develop and enhance an information security management framework.
 
  • Establishing and maintaining a corporate-wide information security management program to ensure that information assets are adequately protected.
 
  • Leading a small team of Security professionals that are responsible for assisting in executing all accountabilities.  Manage all aspects of your staff’s technical and personal development, new hires, dispute resolution and any HR processes.
 
  • Responsible for allocating resources to ensure that staff deliver secure and robust IT solutions to any of the organisations identified and agreed requirements.
 
  • Strategic planning, leadership, staff development, training and adherence to all legal, compliance and regulatory requirements.
 
  • Ownership of all processes and procedures improving the security and robustness of our organisations infrastructure, IT projects and associated systems.
 
  • Identify and safeguard our organisation from all known and developing security threats, security weaknesses, software bugs and exploits.
 
  • Overseeing our organisations current Data, IT and Information Security and any new software or hardware modifications impacting upon overall data security.
     
  • Overseeing planning and execution of necessary vulnerability audits, penetration testing or forensic IT audits and investigations. Ensure that outputs improve your organisations IT Security.
 
  • Liaise with senior level directors, the organisations board and other key stakeholders to demonstrate the current and increasing security posture of our organisation through well-defined KPIs.
 
  • Oversee staff training in all the latest security awareness skills, check associated protocols, methodologies and procedures are implemented.  Ensure our Secure Software Development processes are documented and adhered to.
 
  • Ensure compliance with any related legislation, such as the Data Protection Act, GDPR, ISO standards and PCI, or relevant government regulations.
 
  • Delegated responsibility from Executive Management for compliance with applicable PCI DSS requirements and for the effective delivery of P2PE services with the support from internal stakeholders.
 
  • Plan budget allocations and associated financial forecasts relating to IT, Data and Information security.
 
  • Liaise with and manage your partners, stakeholders, vendors, and third-party service or solutions providers.  Ensure an effective vendor management system is in place from a security perspective, liaising with our Legal team in order to effectively and safely on-board new suppliers.
 
  • Assist with the overall business technology planning, providing a current knowledge and future vision of technology and systems.
 
  • Oversight of the day-to-day control of the maintenance and monitoring of our live production environments (SaaS and hosted environments) to ensure necessary Information Security mechanisms are in place.

Who you are

You will have a background working within the IT Security domain with a solid technical foundation and a clear passion for all aspects related to Security.  You will have a demonstrable track record of performing a similar role within a similar organisation to Zonal, safeguarding our corporate and hosted application landscapes.  You will live, sleep, eat and breathe Security and act as an evangelist within our organisation.

It goes without saying you will have an in-depth and thorough understanding of the technology solution landscape that comes together to enable Zonal to provide world class solutions to the hospitality industry.  You will bring extensive industry, domain and regulatory experience to bear to drive this area of our organisation forwards.
 
  • A good leader.
  • Outstanding written and verbal communication skills.
  • Good understanding of all current legislation and regulations pertaining to your organisation.
  • Successful track record of effective coordination, prioritization, collaboration, organisation and project delivery.
  • Experience in financial forecasting and budget allocation.
  • Knowledge of relevant IT Security related hardware, software and vendor solutions.
  • An overall understanding of source code programming languages, such as C#, C++, .NET, Java, Perl, PHP, Delphi, ColdFusion etc. that our teams use.
  • Practical experience surrounding the security aspects of public and private facing hosted software in virtualised co-lo data centre environments.
  • Deep thinking analytical mind with the ability to quickly get to the root cause of issues.
  • You will need to be organised, efficient and able to work unsupervised under your own initiative.
  • As a natural, confident, and clear communicator you will have significant experience liaising with technical and non-technical teams and across organisational boundaries.
  • You will bring exceptional organisational skills to bear along with significant previous experience of line managing varied and complex teams of technologists to deliver through others.
  • You will be experienced in communicating with support staff, delivery team members and C-Level executives (both internal and external to Zonal) and know how to tailor your communications to the audience.
  • You will be motivated by getting things done, and getting them done in the right way, first time; you are laser focussed on achieving the best outcome.
  • As a valued Senior Manager within the business, you be aware of the business and commercial pressures relevant to your teams, your dynamic leadership skills will pragmatically balance delivery against the pressure – you realise that we don’t always operate in a perfect world and it will be necessary for you to make difficult decisions from time to time.
  • You will have experience of rapid business changes and be able to keep your team motivated, energised and on track through these periods.
  • Using your communication skills, you will keep key stakeholders aware of progress against plans and help mitigate risks. You will understand that the identification of risks and issues is not enough – when escalating you will provide recommendations and solutions.
  • Being accountable for delivery of multiple projects and those factors which make delivery successful or unsuccessful, you will use this knowledge to ensure positive outcome and build a track record of delivering software releases on time and within budget

What we value

Passion, Teamwork, Innovation, Professionalism, Accountability and Customer Obsessed are the values we believe make us the company we are. We’re looking for someone who understands great culture and will help us shape it as it evolves.

Want to shape the future of hospitality?

Flexible working, competitive salaries, annual profit share scheme, childcare vouchers, 33 days annual leave and more… What are you waiting for?



Let’s Connect