Compliance & Information Security Consultant

DXR Cyber; Doncaster; Hybride; GBP 50 000 - 85 000; Plein temps

Avantages offerts par ce poste

Salary Sacrifice pension scheme

Private Medical Insurance

Buy/sell holiday scheme

Birthday leave paid

33 days holiday Inc bank holidays

Cycle-to-work scheme

Employee Assistance Programme

Government Childcare Scheme

Résumé du poste

DXR Cyber is seeking an Information Security Consultant to strengthen the GRC Team’s offerings. You will help mature information security programs for our clients, focusing on ISO 27001 implementations and audits, with familiarity of NIST and UK HMG standards.

The role involves hands-on governance, risk and compliance work, security awareness, and stakeholder engagement while supporting sales in scoping engagements and ensuring robust third-party risk management.

Qualifications

• Extensive GRC experience and InfoSec Operations
• Experience contributing to a Business Management System (BMS) certified to ISO standards
• Knowledge of GDPR, Data Protection Act 2018
• Ability to work autonomously and as part of a team

Responsabilités

• Protect information assets and technologies
• Contribute to audits ISO 27001, ISO 27701, ISO 9001, NIST-CSF, IASME Governance
• Conduct and document internal audits for DXR Cyber and clients
• Hands-on experience in implementing and auditing ISO frameworks
• Experience delivering security awareness training or public speaking
• Develop and leverage relationships with stakeholders
• Manage Third Party Risk Management (TPRM) including vendor security reviews
• Assist Sales in scoping engagements and delivering value
• Understand business continuity and disaster recovery requirements

Connaissances

Time management

Interpersonal skills

Problem solving

Security clearance

UK Driving Licence

Description du poste

Role Overview

Primary Responsibilities

We are seeking an Information Security Consultant to help drive our GRC Team’s service offering. The ideal candidate will have experience working as a ISO 27001 implementor and/or auditor and familiarity with other industry standards such as NIST and HMG standards such as CAF

The candidate will be assisting in supporting the operation, maintenance and maturity of the Information Security program for both DXR Cyber and our external clients.

Duties And Responsibilities Will Include

• Ensuring the protection of information assets and technologies
• Contribution to completion of security related audits such as ISO 27001, ISO 27701, ISO 9001, NIST-CSF, IASME Governance
• Conduct and document internal audits for both DXR Cyber and our clients
• Hands-on experience in implementing and auditing ISO frameworks is required
• Experience delivering security awareness training or and be comfortable with public speaking
• The ability to develop and leverage strong relationships with internal and external stakeholders.
• Manage Third Party Risk Management (TPRM) including vendor security programme reviews,
• Help the Sales Team with scoping engagements and delivering a valued service to our customers
• An understanding of the requirements of business continuity and disaster recovery solutions

You Will Need

• Extensive Information Security Governance, Risk and Compliance (GRC) experience as well as InfoSec Operations experience
• Experience contributing to a Business Management System (BMS) certified to ISO standards
• Good knowledge of the Cyber Essentials Plus Scheme as well as UK & EU General Data Protection Regulation (GDPR) and the Data Protection Act (2018)
• The ability to work autonomously and as part of a team, excellent communication skills

Certifications Preferred

• ISO 27001 Lead Implementer
• ISO 27001 Internal Auditor
• ISO 9001 Implementor
• ISO 9001 Lead Auditor
• CISM/CISSP:

Skills Required

• Skilled in time, priority and task management
• Interpersonal skills to interact with customers and team members
• Ability to anticipate problems, resolve ambiguity and take decisive action
• Eligibility for Security Clearance
• UK Driving Licence
• Hybrid working with a requirement to work from our Head Office (Doncaster once or twice a month, dependent on location)

This is an excellent opportunity within a stable organisation dedicated to Cyber Security.

Benefits

• Salary Sacrifice pension scheme
• Private Medical Insurance
• Buy/sell holiday scheme
• Birthday leave paid
• 33 days holiday Inc bank holidays
• Cycle-to-work scheme
• Employee Assistance Programme
• Government Childcare Scheme