Role details

Contract type

Permanent contract

Employment type

Full-time (> 32 hours)

Experience level

Expert

Experience required

8 years minimum

Compensation

£44,000 - £50,000

Working hours

Regular working hours

Job source

www.reed.co.uk

Tech stack

Cyber Security Information Leak Prevention Identity and Access Management PCI Data Security Standards Systems Development Life Cycle Information Security Management System

Job description

• Helping maintain and improve the ISMS so ISO 27001 certification is kept
• Running internal audits against ISO 27001
• Carrying out risk assessments on business processes, systems and projects
• Helping mature Data Loss Prevention and Access Management
• Working with project managers so security risks are picked up through the SDLC
• Writing and maintaining security policies, standards and procedures
• Carrying out security due diligence on third-party suppliers, including site visits
• Supporting security awareness, audits and incident management

Requirements

• A couple of years in information security, IT risk, governance or compliance
• A solid understanding of ISO 27001 (essential)
• Experience of risk assessments and security policies
• Knowledge of data protection and regulatory requirements (FCA, ICO)
• Clear communication, with the ability to explain technical points simply
• CISSP, CISA or CRISC, or the drive to study for one (an ISACA qualification would be ideal)
• Desirable: ISO 27001 implementer or auditor, ITIL Foundation, financial services or insurance experience, * CISSP
• CISA
• ISMS
• PCI DSS
• ISO 27001
• Data Loss Prevention
• Supplier Due Diligence
• Access Management
• Internal Audit
• Risk Assessment

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on www.reed.co.uk

Prepare application

• Draft this with your agent
• Open in Claude
• Open in ChatGPT
• Copy prompt