Information Security Risk Specialist

Barclay Simpson; Ipswich; Hybrid; GBP 60,000 - 80,000; Full time

Job summary

A leading financial services firm in Ipswich seeks an Information Security Risk Specialist. This role involves assessing security requirements for technology projects, ensuring compliance with internal standards, and collaborating with cross-functional teams. Key functions include reviewing security designs and managing project risk documentation. Strong understanding of information security governance and excellent communication skills are essential. Competitive compensation is offered.

Qualifications

• Strong understanding of information security governance and project risk management.
• Experience working with architecture, cyber assurance, and resilience teams.
• Knowledge of security assessment, cloud security, and vulnerability management.
• Excellent communication and stakeholder engagement skills.

Responsibilities

• Review and assess Information Security Criticality Assessments to determine project risk and security requirements.
• Collaborate with architects and cross‑functional teams to finalize security controls in solution designs.
• Ensure alignment with Operational Resilience and Cyber Security standards.
• Review and validate security deliverables including ISCA questionnaires and High‑Level Designs.
• Manage project security documentation, evidence storage, and reporting tools.
• Provide security sign‑off at project stage gates and prepare closure reports.
• Track and report project risk status, escalating amber/red issues.
• Support risk acceptance processes and advise teams on secure design decisions.

Skills

Information security governance

Project risk management

Cyber assurance

Communication skills

Job description

Information Security Risk Specialist required for global financial services firm. You will support secure delivery across technology projects. The role focuses on assessing project security requirements, reviewing designs, and ensuring compliance with internal security and resilience standards.

Key Responsibilities

• Review and assess Information Security Criticality Assessments (ISCA) to determine project risk and security requirements.
• Collaborate with architects and cross‑functional teams to finalize security controls in solution designs.
• Ensure alignment with Operational Resilience and Cyber Security standards.
• Review and validate security deliverables including:
  • ISCA questionnaires and High‑Level Designs (HLD)
  • Technical and Solutions Design Authority reviews
  • Third‑party risk evaluations and IAM assessments
  • Security baseline, code review, vulnerability, and penetration test reports
• Manage project security documentation, evidence storage, and reporting tools.
• Provide security sign‑off at project stage gates and prepare closure reports.
• Track and report project risk status (RAG), escalating amber/red issues.
• Support risk acceptance processes and advise teams on secure design decisions.

Requirements

• Strong understanding of information security governance and project risk management.
• Experience working with architecture, cyber assurance, and resilience teams.
• Knowledge of security assessment, cloud security, and vulnerability management.
• Excellent communication and stakeholder engagement skills