Security engineer

LexisNexis Risk Solutions; Greater London; On-site; GBP 60,000 - 110,000; Full time

Job summary

LexisNexis Risk Solutions ищет специалиста по информационной безопасности для управления и поддержки проектов по безопасности, комплаенсу и оценке рисков среди клиентов, аудиторов и регуляторов. Ваша роль — усиление контроля, поддержка аудитов и обеспечение защиты конфиденциальности, целостности и доступности систем.

Ключевые задачи включают ведение клиентских обзоров безопасности, координацию сбора доказательств, обеспечение соответствия рамкам ISO 27001 и NIST, а также взаимодействие с

Qualifications

• Опыт в области информационной безопасности, кибербезопасности, IT‑рисков и соблюдения требований или смежной технологической дисциплины.
• Знание рамок безопасности и соответствия ISO 27001, NIST, SOC 2, PCI, Cyber Essentials; опыт поддержки аудитов.

Responsibilities

• Ведение и поддержка обзоров безопасности клиентов, вопросов due diligence, оценочных визитов и аудитов.
• Координация сбора доказательств, оценка эффективности контролей, отслеживание замечаний до их устранения и ведение документации.
• Поддержка программ безопасности и соответствия в рамках ISO 27001, NIST, SOC 2, PCI и Cyber Essentials.
• Выстраивание взаимодействия с клиентами как эксперт по информационной безопасности и предоставление понятных ответов во взаимодействии с заказчиками.
• Содействие требованиям клиентов, контрактам, рискам безопасности и мероприятиям по устранению недостатков.

Skills

Information security

Cybersecurity

IT risk

Compliance

Security governance

Vulnerability management

Monitoring

Communication

Project management

Customer service

Job description

Описание

As an Information Security professional, you will manage and support security, compliance and risk assessment activities across internal and external stakeholders, including customers, auditors, service providers and regulators. You will play a key role in strengthening security controls, supporting compliance initiatives, responding to customer security requirements and helping protect the confidentiality, integrity and availability of organisational systems and information.

Задачи

• Lead and support customer security reviews, due diligence questionnaires, virtual/on-site assessments and internal and external compliance or certification audits.
• Coordinate evidence collection, assess control effectiveness, track findings through resolution and maintain organised documentation and repositories.
• Support security and compliance programmes aligned with frameworks such as ISO 27001, NIST 800 Series, SOC 2, PCI and Cyber Essentials.
• Serve as a client-facing Information Security subject matter expert, providing clear, accurate and timely responses that build customer trust and support new and existing business.
• Partner with Security, Technology, Legal, RFP and business teams on customer requirements, contracts, security risks, controls and remediation activities.
• Help maintain security policies, procedures, controls, SIG responses and supporting documentation, including applicable regional requirements.
• Assess security programmes and identify opportunities to strengthen governance, vulnerability management, monitoring, controls and organisational security practices.
• Communicate security risks, findings, recommendations and progress effectively to technical teams, business stakeholders, customers, auditors and senior leadership.

Требования

• Significant experience in information security, cybersecurity, IT risk, compliance or a related technology discipline; equivalent practical experience is welcomed.
• Strong knowledge of security across on-premises, colocation and cloud environments, including cloud security and compliance technologies.
• Working knowledge of security and compliance frameworks such as ISO 27001, NIST, SOC 2, PCI and Cyber Essentials, with experience supporting assessments or audits.
• Strong understanding of security governance and controls, vulnerability management, monitoring and alerting, and system, security and software development life cycles.
• Experience managing customer security enquiries, due diligence questionnaires, audits, assessments, evidence requests and remediation or follow-up activities.
• Strong project management, organisational, prioritisation, problem-solving and change management skills, with the ability to coordinate work across multiple teams.
• Excellent written, verbal, presentation and customer-service skills, with the ability to clearly communicate complex security topics to technical and non-technical audiences.
• Будет плюсом: Relevant security or risk certifications such as CISSP, CISM, CISA or comparable credentials are valued but not required

Условия

We know your well-being and happiness are key to a long and successful career. We are delighted to offer country specific benefits.