Assistant Manager, Information Security Risk & Governance

JTC Group; Saint Helier; Hybrid; GBP 45,000 - 65,000; Full time

Job summary

JTC Group in Jersey is seeking an Information Security Risk and Governance professional to support the daily operations of security controls across our global system, including control oversight, assurance, testing and due diligence as part of the information security strategy.

In a hybrid workplace, you will contribute to risk assessments, maintain the risk register, support audits and help develop Business Continuity Plans with defined RTOs and RPOs.

Qualifications

• Experience in Information Security Risk and Governance.
• Strong technical skills with a risk-based approach including GRC solutions and Azure infrastructure.
• Familiarity with information system frameworks, policies, standards, best practices, processes, and controls.
• Strong attention to detail.
• Excellent communication skills both verbal and written.
• Ability to demonstrate an innovative approach to evolving information security risk and governance.

Responsibilities

• Policy enforcement: support the implementation of information security policies and standards.
• Governance, risk and compliance duties, both directly and indirectly.
• Maintain and update the Information Security Risk Register and escalate as needed.
• Assist with proactive risk assessments across network, infrastructure, application and third parties.
• Help develop and maintain Business Continuity Plans (BCP) and BIAs with RTOs/RPOs.
• Assist with client due diligence, internal and external audits.
• Support reporting and analytics to track IT security initiatives.
• Stay updated on security trends, threats, vulnerabilities and controls.
• Assist with user access reviews and address security risks.
• Maintain documentation of roles and responsibilities; comply with regulatory and AML requirements.
• Adhere to CPD requirements and company values.

Skills

Information Security

Risk Governance

GRC

Azure

Education

Certifications

Job description

JTC Group in Jersey is seeking an Information Security Risk and Governance professional to support the daily operations of security controls across our global system, including control oversight, assurance, testing and due diligence as part of the information security strategy.

In a hybrid workplace, you will contribute to risk assessments, maintain the risk register, support audits and help develop Business Continuity Plans with defined RTOs and RPOs.