Information Security Assurance Specialist
Role details
Job location
Tech stack
Job description
Hybrid working: 3 days per week required in the office.
Reporting into my clients Information Security Manager, the Information Security Assurance Specialist will focus on identifying where security assurance testing of the firm's systems and processes is required, commission the required tests from relevant suppliers, and manage their findings through to resolution.
It will provide security assurance in relation to the IT project and change management lifecycles by identifying security requirements, reviewing project design documentation, and working with technical stakeholders to mitigate information security risks associated with technical change requests.
It will also assist in managing the firm's information security management system (ISMS), including maintaining policies, producing management reports, and supporting compliance activities.
Requirements
Strong experience of working within an Information Security / Technical Cyber Security role within a regulated environment or organisation aligned to ISO27001 (ideally professional services).
- Strong knowledge of ISO27001 and Cyber Essentials Plus standards
- Strong experience in Information Security Assurance