Our client has an EE opportunity available for an Information Security Officer based in Selby.

Requirements:

• 7 years experience in technology security or risk management roles of which should include:
  • 4 years in technology policy writing.
  • 4 years experience in designing implementing and closing technology general control gaps.
  • 3 years experience in directly assessing and communicating risk exposures and developing risk mitigation plans.
  • 3 years experience in coordinating large projects or initiatives.
  • 4 years experience in people management including coaching and mentoring.
• IT related bachelors degree or degree in computer science or IT based practice.
• Professional registration or membership in information security forums would be advantageous.
• Security related certification would be advantageous.

Responsibilities:

• Implement the Technology Strategy and innovation for your area of responsibility.
• Execute analysis and planning activities.
• Research, develop and maintain a knowledge base of the IT threat landscape, security trending, etc.
• Implement the design for your area of responsibility.
• Design and manage a road map for information security.
• Build and measure business relationships with key internal and external stakeholders.
• Provide consulting and engagement services to various business units in the procurement process.
• Establish relevant internal control metrics and audits to measure outcomes and performance related to security.
• Conduct risk and quality management.
• Develop and maintain an internal security audit framework.
• Conduct financial management.
• Provide input into the departmental budget.
• Create awareness of IT security good practices to the IT end user and technical community.

Our client has an opportunity available for an Information Security Officer based in Selby.

Requirements:

• 7 years experience in Technology Security or Risk Management roles of which should include:
  • 4 years in Technology Policy writing.
  • 4 years experience in designing, implementing and closing Technology general control gaps.
  • 3 years experience in directly assessing and communicating Risk Exposures and developing risk mitigation plans.
  • 3 years experience in coordinating large projects or initiatives across multiple areas.
  • 4 years experience in people management, including coaching and mentoring.
• IT Bachelors Degree or Degree in Computer Science or IT Best practise.
• Professional Registration or Membership- Information Security Forums, ISACA, ISC2 would be advantageous.
• Security related certification- advantageous.

KPAs:

• Implement the Technology Strategy & Innovation for your area of responsibility.
• Organize outputs aligned to the Technology risk strategy, internal controls and budget of internal resourcing and partnerships to assure Technology Compliance to best practise and regulatory compliance.
• Execute Analysis & Planning Activities.
• Research, develop and maintain a knowledge base of the IT threat landscape, security trending, regulatory requirements, mobile and other new technologies to mitigate and plan against threats.
• Implement the Design for your Area of Responsibility.
• Design and manage a roadmap for information security related to internal controls, compliance, regulatory and a proactive risk mitigation plan for the Technology department.
• Implement & execute on activities within your area of responsibility.
• Build and measure business relationships with key internal and external stakeholders to proactively consult and mitigate security threats.
• Develop and maintain an internal security audit framework to implement standards toward zero downtime and zero audit findings.
• Ensure risk and quality management.
• Consolidate and review monthly payments to vendor providing an analysis on the spend.
• Drive the proactive audit framework and compliance.
• Implement and manage the technology self-audit framework.
• Create and manage partnerships to manage, maintain and optimise Technology Risks toward a future focused innovative Strategy.
• Create awareness of IT Security good practices to the IT end user and technical community.
• Measure the effectiveness of the awareness plan through sampling, surveys, tests, attendance registers or change management initiatives.
• Create a Conductive environment which translates into productivity and high morale.
• Act as a change management architect in periods of change to ensure continuity to operations.