Information Security Assurance Manager | United Kingdom

Overview:

Financial Services business looking to hire an Information Security Assurance Manager who will take responsibility for developing and delivering the firms Information Security Assurance programme. The role holder will also be responsible for overseeing all aspects the information security management system, ensuring controls and assurance audits are in place and mitigating potential information security breaches.

The position will be home based with 2 – 3 office days per month. Benefits include pension contribution, annual bonus and private medical.

Responsibilities

•To act as the point of contact for assurance matters across the business and for third parties relating to information security assurance.

•To build and execute an ongoing program of first line audit assurance covering all aspects of ISO27001 and the controls set out in the firm.

•To successfully manage the Information Security Management System on behalf of the firm and ensure compliance with its components.

•To work closely with key stakeholders including CISO/Head of Information Security, Risk, Audit, IT to assist and provide input to ensure that the firms Information Security policies and procedures are effective and adhered to.

•To be proactive in making recommendations for updates to policies and procedures

•To work with information security operations to maintain acceptable levels of control and risk

•To assist in the development and implementation of a robust set of Information Security Operation standards based upon best practices and lead by example to provide excellent security guidance.

•To maintain the Information Security (COO) Risks and Controls register and work closely with other information security colleagues and carry out actions to mitigate the risks identified.

Candidate Requirements

•Work experience in a broad Information Security Management position, ideally within a Financial Services led environment or equivalent highly regulated industry.

•Experience of managing an ISMS

•Experience of ISO27001 audits, NIST audits or similar, ideally either a Certified ISMS Lead Auditor (CIS LA), demonstration of experience will be considered.

•Certification in Information Security (CISM etc.) or comparable work experience.

Please note, should feedback not be received within 28 days due to the large volume of applications, unfortunately, your application has been unsuccessful. However, we may be in touch with similar relevant opportunities.

If you would like this job advertisement in an alternative format, please contact MERJE directly on 0161 883 2740.