InfoSec Program Lead: Risk, Compliance & ISO27001

Talantir; New York (NY); On-site; USD 125,000 - 160,000; Full time

Job summary

Talantir is seeking a senior Information Security professional to deliver information security programmes and ensure protection of the firm’s information assets. You will act as a trusted advisor, monitor security measures, and report on effectiveness to strengthen the security posture.

The role includes maintaining ISO27001 and Cyber Essentials, supporting audit responses, and collaborating with Technology & Data teams to embed security best practices across system designs.

Qualifications

• Degree-level qualifications in computer science, information security, or a related field, or equivalent professional experience.
• Certifications such as CISSP or CompTIA Security+ are desirable.
• Proven experience implementing and maintaining cyber security programmes.

Responsibilities

• Deliver programmes and processes to reduce information security risk.
• Act as a trusted advisor on information security activities.
• Monitor, measure and report on security effectiveness.
• Support ISMS operation and keep ISO27001 and Cyber Essentials certifications.
• Assist with audit responses and supply chain due-diligence assessments.
• Collaborate with Technology & Data teams to embed security in designs.

Skills

Risk management

Information security

Regulatory compliance

Communication of security requirements

Analytical reporting

Cross-functional collaboration

Problem solving

Education

Degree in computer science or information security

Tools

ISO 27001

Cyber Essentials

Job description

Talantir is seeking a senior Information Security professional to deliver information security programmes and ensure protection of the firm’s information assets. You will act as a trusted advisor, monitor security measures, and report on effectiveness to strengthen the security posture.

The role includes maintaining ISO27001 and Cyber Essentials, supporting audit responses, and collaborating with Technology & Data teams to embed security best practices across system designs.