Job Reference: BBBH34988
Job Duration:
Start date: ASAP
Description:
Information Security Risk Analyst
Location:
London
Role:
You will work across all levels of the business, engagingwith senior Business Managers and the Risk and compliance teams.
The main objectives of this role are to
* Lead Securityrisk assessments within projects, supplier engagements and IT change
* Share risk mitigation options, ensuring security risksare managed in line with the firms' risk policies
* Focus on KPIs and KRIs (Key Risk Indicators) and lead IT risk assessment for the company
* Communicate the security impact of technology risks, the approach to risk mitigation and risk acceptance across all levels of the business
* Participate in the vendor management and due diligence process, ensuring security risks are considered for 3rd parties the firm works with
* Provide risk advisory services to technology and business groups
* Work withstakeholders, both technical and non-technical to enable a pragmatic approach to apply security best practice
Essential knowledge/experience
* ISO27001 knowledge is essential - you must have experience of assisting in the certification/re-certification process before from initiation to completion
* Experience to be complemented by certifications e.g. CISM, CISSP, ISO27001Lead Auditor
* Proven experience in assessing information security risk and developing an ISMS
* An understanding of best practices globally is essential for this position, along with supplier risk
* Excellent communication skills and able to liaisewith external (3rd party) stakeholders across various functions in the business.
Industry: IT
Salary: Up to £0.00 per annum + Competitive Salary
Salary Benefits: Competitive Salary
Vacancy Type: Permanent
Job Skills: -
Contact Name: Jack Bannister
Website: -
Direct Application URL: -