Information Security Officer

JR United Kingdom; Carlisle; Hybrid; GBP 68,000; Full time

Job summary

An innovative Financial Sector business is seeking an Information Security Assurance Officer to join their supportive team. This role involves developing and maintaining the Information Security Assurance program while ensuring compliance with standards like ISO27001 and NIST. The company prioritizes employee development and community focus, making it a great place for those who want to make a positive impact. With competitive salary and hybrid working options, this position is perfect for individuals looking to grow in a purpose-led organization committed to social responsibility and cultural change.

Benefits

25 days holiday plus public holidays

Opportunity to buy/sell holidays

Learning and Development opportunities

Hybrid Working

Health and Wellbeing events

Community Day off for charity work

Qualifications

• Demonstrable experience in Information Security discipline.
• First-hand experience with compliance standards like ISO27001.

Responsibilities

• Support the Information Security Manager in delivering assurance programs.
• Mitigate risks of potential Information Security breaches.

Skills

ISO27001

NIST

PCI

CQUEST

Interpersonal Skills

Analytical Skills

Attention to Detail

Relationship Management

Communication Skills

Proactivity

Job description

Social network you want to login/join with:

Information Security Assurance Officer - £68000 plus bens

• Are you someone who understands the value of assuring company Information?
• Do you have experience with ISO27001, PCI, NIST,CQUEST?
• Can you understand the outputs from Penetration Test reports?
• Is the management of key stakeholders important to you?

If you can say yes to the points above, then we have an exciting opportunity for an Information Security Assurance Officer to join my client’s team. My client is an innovative Financial Sector business who pride themselves on their supportive and community focussed workplace. They work hard to ensure their employees feel valued and continually develop their careers.

The role is within a remotely based team. However, they do meet in Carlisle once a fortnight, so you must be able to commit to that routine.

At present we are not looking for candidates who are working on any UK Visas including Spousal and Graduate Visas.

What will you be doing?

You will be supporting the Information Security Manager in developing, maintaining, and delivering the business’s Information Security Assurance program ensuring that it meets current and future business requirements.

You will play a pivotal role in mitigating risk of potential Information Security breaches as well as reviewing lessons learnt from incidents, risk events and near misses, working with relevant areas of the business to implement suitable controls.

Main responsibilities include:

• Support and execute all group-wide assurance tasks, initiatives, and assignments.
• Assist in the ongoing program of security assurance covering all aspects of ISO27001 and the controls set out in the Business.
• Support the management of the Information Security Management System on behalf of the Business and ensure compliance with its components.
• Assist in updating assurance owned documentation and proactively managing the assurance audit calendar on behalf of the Information Security Assurance Manager.
• To be proactive in making recommendations for updates to policies and procedures as required
• Carry out assurance reviews in line with the schedules calendar, producing reports, feedback and managing actions/non-conformities through to satisfactory conclusion.
• Support the Information Security Assurance Manager in working with information security operations to maintain acceptable levels of control and risk throughout the Business.
• To assist in the maintenance of the Information Security (COO) Risks and Controls register and work closely with other information security colleagues and carry out actions to mitigate the risks identified.
• Identify risks and ensure these are presented in accordance with procedures and are given the appropriate level of attention.
• Propose appropriate level of risk mitigation/compensating controls. Work closely with key stakeholders including Risk, Audit, Technology and Information Security Operations to assist and provide input to ensure that Business policies and procedures for Information/Cyber Security Operations are effective and adhered to.
• Assist in the preparation and delivery of Information Security Assurance reports, dashboards and audits are completed on schedule.
• To assist with assurance returns e.g., LINK, Code of Conduct, SWIFT etc.
• To assist with content for information security campaigns.
• Support in phishing campaigns, the management the outcomes and necessary training.
• To assist in the delivery of training and awareness across the Business.

What skills and experience do you need for the role?

Ideally you will have demonstrable experience within the Information Security discipline and have first-hand experience of compliance such as ISO27001, NIST, PCI & CQUEST requirements.

You will have strengths in the following skills, abilities and behaviours:

• Excellent interpersonal, written and verbal communication skills and the ability to work well with people at every level.
• Ability to work with autonomy, be organised and able to work under pressure.
• Strong relationship management and influencing skills.
• Attention to detail to ensure accurate assessment and management of risk.
• Strong analytical skillset.
• Can demonstrate people management skills and the necessary soft skills.
• Ability to effectively prioritise situations requiring urgent attention.
• The ability to inspire the team to think ‘outside of the box’ and go the extra mile.
• Pro-activity and self-motivated with the proven ability to drive results and provide excellent customer services to all levels of the organisation.
• High level of motivation to see success delivered through own personal efforts and those around them.

What is in it for you?

This is a business who strive to create a Financial Service experience that’s kinder to people and planet. Unlike banks, they don’t have public or private shareholders which means we can invest 100% of our profits back into the business. As a result, the business is purpose-led, financially strong, socially responsible and always focused on their people, planet and communities.

Presently they are about to begin an exciting transformational journey with their people firmly at the forefront of their plans. If you want to work for a team integral in helping to drive cultural change, a team where you can bring your whole self to work bringing your energy and creativity to make a positive difference, then this is the job for you.

• Competitive salary - up to £68000 p.a. depending on skills and experience.
• Holidays - 25 days holiday plus public holidays and the opportunity to buy and sell up to 2 days.
• Learning and Development opportunities - We want you to grow in your role. We’ll work together to support your personal and professional development.
• Hybrid Working - the tools and equipment you need to be able to work from home when you need to, depending on your role.
• Health and Wellbeing - a calendar of events and activities throughout the year, Mental Health & Wellbeing champions and Cycle to Work scheme.
• Community Day - We offer our people an extra paid day off every year to help local charities and community organisations.