Information Security Officer

Dianaduggan; Greater London; Hybrid; GBP 110,000 - 125,000; Part time

Benefits offered by this job

Umbrella Company

Job summary

Dianaduggan is seeking an Information Security Officer for a 6-month hybrid assignment in London. The role focuses on preventing, monitoring and responding to information/data breaches and cyber-attacks, aligning with client security policies and directives.

You will lead efforts to automate controls, review risks, and coordinate with IT to ensure secure architectures. Start ASAP with umbrella pay framework and 4 days in-office work.

Qualifications

• Strong understanding of cloud security architectures (AWS Well-Architected, etc.).
• Knowledge of IAM security models for AWS and GCP.
• Deep knowledge of cloud infrastructure and architecture (VPC, EC2, S3, Cloud Storage).
• Familiarity with compliance and risk frameworks (NIST, ISO 27001, CSA STAR).
• Familiarity with IaC security (Terraform, CloudFormation).
• Industry certifications such as CISSP/CISM/CCSP are desirable.

Responsibilities

• Identify opportunities to automate and standardize information security controls.
• Resolve vulnerabilities or issues detected in applications or infrastructure.
• Analyze sources to mitigate weaknesses and vulnerabilities.
• Review automated test results and prioritize remediation actions based on risk.
• Collaborate with IT to ensure systems follow security policies and best practices.

Skills

Cloud security

IAM models

Cloud infra

IaC security

Cloud certifications

Tools

Terraform

CloudFormation

AWS

GCP

Job description

We are supporting our client with an Information Security Officer role.

You will be responsible for driving efforts to prevent, monitor and respond to information/data breaches and cyber-attacks and execute the of Information Security (IS) directives and activities in alignment with the client’s information and cybersecurity policies.

• Role: Information Security Officer
• Contract duration: 6 months initially (with scope to extend)
• Location: Hybrid – 4 days a week in London office, 1 day working from home.

We are supporting our client with an Information Security Officer role.

You will be responsible for driving efforts to prevent, monitor and respond to information/data breaches and cyber-attacks and execute the of Information Security (IS) directives and activities in alignment with the client’s information and cybersecurity policies.

• Role: Information Security Officer
• Day rate: £450 per day (inside IR35)
• Pay framework: Umbrella Company
• Start date: ASAP
• Contract duration: 6 months initially (with scope to extend)
• Location: Hybrid – 4 days a week in London office, 1 day working from home.

Key Responsibilities:

• Identify opportunities to automate and standardize information security controls.
• Resolve any vulnerabilities or issues detected in an application or infrastructure.
• Analyze source code to mitigate identified weaknesses and vulnerabilities within the system.
• Review and validate automated testing results and prioritize actions that resolve issues based on overall risk.
• Scan and analyze applications with automated tools, and perform manual testing if necessary.
• Reduce risk by analyzing the root cause of issues, their impact, and required corrective actions.
• Direct the development and delivery of secure solutions by coordinating with business and technical contacts.
• Contribute to execution of the architectural vision for all IT systems through major, complex IT architecture projects.
• Security Architecture: Collaborate with IT to ensure system architecture follows corporate policies and IT best practices.
• Risk management: Identify, assess and mitigate security risks. Identify application compensating controls for non-compliant items.
• Provide technical leadership and is responsible for developing components of, or the overall systems design.
• Translate complex business problems into sound technical solutions.
• Provide integrated systems planning and recommends innovative technologies that will enhance the current system.
• Recommend appropriate infrastructure platforms, and communication links required to support IT goals and strategy.
• Impact the architecture function by influencing decisions through advice, counsel or facilitating services.

Essential experience

• Strong understanding of cloud security architectures (i.e. AWS Well-Architected Framework, Google Cloud Security Command Centre).
• Knowledge of the Identity and Access management (IAM) security models of AWS and GCP.
• In-depth knowledge of cloud infrastructure and architecture (e.g. VPC, EC2, S3, Cloud Storage and Compute Engine.
• Familiarity with compliance and risk frameworks (NIST, ISO 27001, CSA STAR)
• Familiarity with IaC security (Terraform, CloudFormation)
• Advanced proficiency with Microsoft Office tools and software.
• Public Cloud Solution Architect or Security Certifications are desired (i.e. AWS Certified Solution Architect, GCP Professional Cloud Security Engineer)
• Industry certifications such as CISSP/CISM/CCSP are desired.