Package Description

Information Security Officer
Competitive + Benefits
Job Introduction

Main Responsibilities:

You'll be working as part of a friendly Group Information Assurance team, as an Information Security Officer in our Head Office in Hatfield and London Your duties will include Security Incident management - investigation, co-ordination and remediation, change management - reviewing and assessing business change, Privilege Access Management (PAM), Reviewing and analysing security logs and data including vulnerability scans, updating dashboards and presenting to an audience in monthly service reviews. Co-ordination of IT Health checks and List X officer duties. You'll have the resilience to take on a task / problem and see it through to successful conclusion. You will be responsible for implementing and maintaining the Information Security Management System (ISMS) and the compliance of staff and policies, procedures, guidelines and standards used to support the effectiveness of the ISMS. You will support in the annual verification of ISO27001 and other security certifications that our client hold. Risk management will be one of your key responsibilities and include carrying out risk assessments, driving risk management / treatment controls with risk owners and risk reporting. You may also assist with internal and external audits

The Ideal Candidate We're looking for an Information Security Officer who has experience and understanding of ISO27001 Information Security Standards, a good working knowledge of security related legal and regulatory requirements, the ability to manage and deliver tasks through to successful conclusion. To be considered, experience in the following areas is key -

• Experience in SIEM
• An understanding of Vulnerability Management (Qualys / Tenable experience)
• A background in undertaking risk assessments and managing risk and taken part in internal and external audits.
• Security incident experience
• Security qualifications - CISMP would be an advantage

Strong customer delivery experience and evidence of service improvement skills, as well as a passion for Cybersecurity and excellent written and verbal communication skills with the ability to present to a non-technical audience. To be considered for this opportunity an ability to be security cleared is essential.