Data Security/ Compliance

IT Security Governance and Risk

I am working with a global company to help find Security candidates that will assist in the delivery of operational, tactical and strategic initiatives as part of global information security programmes

Key Requirements:

  • Assist in the ongoing maintenance and administration of Group Systems.
  • Work with functions to develop and maintain standard operating procedures.
  • Assist in the day-to-day operation and improvement of the Information Security Management System.
  • Review and assess third party suppliers and contracts to assess associated risks and fit with company policies and standards.
  • Provide SME advisory on a range of Information security frameworks and standards including ISO 27001, ITIL and NIST.
  • Assist OpCos to develop Information Security Management Systems and attain ISO 27001 accreditation.
  • Provide advisory and consultancy services to OpCos and business units to drive further enhancement of security practices.
  • Minimum 3-5 years' experience in Information Security
  • Experience in planning, implementing and assisting in delivering complex security projects
  • Strong communication skills - ability to deliver technical messages to a non-technical audience
  • Experience implementing industry frameworks, policies and standards (e.g. ISO 27001, NIST, ITIL etc.)
  • Nice to have: experience with GRC Tooling, Security Awareness Campaigns e.g. Archer.