Information Security Specialist - Risk & Governance (Hybrid)

Local Pensions Partnership; Lancashire; Híbrido; GBP 45.000 - 50.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Pension scheme

Health plan

Wellbeing webinars

Employee Assistance Programme

Discount Scheme

Wellbeing events

Free fruit in office

Free parking in Preston

Descripción de la vacante

Local Pensions Partnership (LPPA) is seeking an Information Security Specialist to strengthen governance, risk management and assurance across the organisation. This hybrid role is based in Preston, with 2 days onsite and 3 days remote, and offers a generous benefits package and professional growth within Risk & Governance.

You will lead framework development, risk assessments and third‑party due diligence, translating technical issues into clear business risks for senior leaders and boards.

Formación

• Substantial practical experience in information security governance, risk management, or a comparable specialist role.
• Experience leading information security risk assessments or assurance reviews with clear findings and recommendations.
• Experience assessing technical and organisational security controls, supporting or leading security incidents, and undertaking third-party security due diligence.
• Strong knowledge of information security governance, risk management and assurance principles, with a good understanding of cyber threats, vulnerabilities and common technology risks.
• An understanding of identity and access management, logging and monitoring, vulnerability management, encryption, network security, cloud risk and secure configuration.
• The ability to evaluate conflicting or incomplete evidence, reach a reasoned conclusion and translate technical issues into clear business risks.

Responsabilidades

• Lead the development and continuous improvement of LPPA's information security management framework, policies, standards and supporting procedures.
• Maintain LPPA's information security risk profile, ensuring risks are recorded, assessed, owned, monitored and reported through the appropriate governance arrangements.
• Provide authoritative advice and constructive challenge to Technology, project teams and business owners on security risks and their treatment.
• Lead the information security assurance programme, including control reviews, evidence gathering, thematic assessments and remediation monitoring.
• Assess the design and operation of key information security controls, identify weaknesses and recommend proportionate improvements.
• Lead supplier and third-party security due diligence, reviewing security evidence, certifications, contractual controls, risk assessments and remediation activity.
• Lead the governance and oversight of information security incidents, including assessment, documentation, escalation, investigation and post-incident review.
• Produce information security reports, dashboards and assurance updates for senior management, governance committees and Boards.
• Support business continuity, disaster recovery and operational resilience activity, including cyber incident response and recovery exercises.
• Coordinate with external security advisers, testing providers, auditors and assurance partners.

Conocimientos

Information security governance

Security risk management

Security assurance

Third-party due diligence

Vulnerability assessment

Stakeholder communication

Educación

Information / Cyber security qualification

Professional body membership desirable

Herramientas

Security testing tools

Microsoft security environments

Descripción del empleo

Local Pensions Partnership (LPPA) is seeking an Information Security Specialist to strengthen governance, risk management and assurance across the organisation. This hybrid role is based in Preston, with 2 days onsite and 3 days remote, and offers a generous benefits package and professional growth within Risk & Governance.

You will lead framework development, risk assessments and third‑party due diligence, translating technical issues into clear business risks for senior leaders and boards.