Information Security Officer

Our client has an opportunity available for an Information Security Officer based in Selby.

Requirements:

• 7 years’ experience in Technology Security or Risk Management roles of which should include:
  • 4 years in Technology Policy writing.
  • 4 years’ experience in designing, implementing and closing Technology general control gaps.
  • 3 years’ experience in directly assessing and communicating Risk Exposures and developing risk mitigation plans.
  • 3 years’ experience in coordinating large projects or initiatives across multiple areas.
  • 4 years’ experience in people management, including coaching and mentoring.
• IT Bachelor’s Degree or Degree in Computer Science or IT Best practise.
• Professional Registration or Membership- Information Security Forums, ISACA, ISC2 would be advantageous.
• Security related certification- advantageous.

KPAs:

• Implement the Technology Strategy & Innovation for your area of responsibility.
• Organize outputs aligned to the Technology risk strategy, internal controls and budget of internal resourcing and partnerships to assure Technology Compliance to best practise and regulatory compliance.
• Execute Analysis & Planning Activities.
• Research, develop and maintain a knowledge base of the IT threat landscape, security trending, regulatory requirements, mobile and other new technologies to mitigate and plan against threats.
• Implement the Design for your Area of Responsibility.
• Design and manage a roadmap for information security related to internal controls, compliance, regulatory and a proactive risk mitigation plan for the Technology department.
• Implement & execute on activities within your area of responsibility.
• Build and measure business relationships with key internal and external stakeholders to proactively consult and mitigate security threats.
• Develop and maintain an internal security audit framework to implement standards toward zero downtime and zero audit findings.
• Ensure risk and quality management.
• Consolidate and review monthly payments to vendor providing an analysis on the spend.
• Drive the proactive audit framework and compliance.
• Implement and manage the technology self-audit framework.
• Create and manage partnerships to manage, maintain and optimise Technology Risks toward a future focused innovative Strategy.
• Create awareness of IT Security good practices to the IT end user and technical community.
• Measure the effectiveness of the awareness plan through sampling, surveys, tests, attendance registers or change management initiatives.
• Create a Conductive environment which translates into productivity and high morale.
• Act as a change management architect in periods of change to ensure continuity to operations.