Information Security Specialist

Warrington, Cheshire
Carbon 60

Information Security Specialist

Location: Warrington, Aberdeen or Chesterfield

Our engineering based client are looking for an Information Security Specialist to work in either their Warrington, Aberdeen or Chesterfield site. This commitment is delivered by an experienced and highly competent workforce of over 4,500 employees operating from 14 offices in strategic industrial hubs, upholding the highest standards of safety, compliance and quality. Primary responsibility for supporting and implementation of information and data security policies and procedures in accordance with externally verified ISO 27001: 2022 requirements and other third party accreditation schemes. Main Responsibilities

• Responsible for coordinating from beginning to completion the transition from ISO 27001:2013 to 2022
• Identifying and analysing information security risks and potential threats to the organisation’s internal and external function
• Managing risk reporting
• Supporting with scheduling, preforming and reporting on audits and bolstering the ISMS methodology for ISO27001 certifications
• Handling supplier assurance requests
• Assist the Head of Cyber & Information Security with managing, maintaining and testing the information security aspects of the Business Continuity Plan
• Assessing, monitoring and alerting on Data Loss Prevention in-line with agreed business policies
• Scheduling, managing and coordinating attendees of external audits from all departments for both ISO 27001 & TickIT Plus
• Responsible for updating and managing the ISO 27001 & TickIT Plus Statement of Applicability
• Management of Risk Register for TickIT plus – IS-MS-005, Objectives & Targets, Legal and Compliance Requirement Registers
• Supporting the delivery of the information security strategy as designed by the Head of Cyber & Information Security
• To ensure policies, processes and procedures are aligned with best practice and kept up to date
• Responsible for triaging and handling colleagues queries relating to information security and acting as a point of escalation for service delivery teams
• To participate and sometimes chair the Information Security Steering Group meetings
• Participate and coordinate the monitoring of Third Party Risks
• Assist and sometimes coordinate security incidents from start to finish
• Identifying risks and ensuring the risk register is kept update
• Facilitate the promotion of a robust security culture within the organisation
• Identifying and monitoring external information sources to make recommendations on latest security threats and vulnerabilities that affect our technical estate
• Offering security support to the commercial tendering and bid processes in relation to information security management requirements
• Required to comfortable and effectively act as the Delegate of Authority for the Head of Cyber & Information Security

Experience & Qualifications

• Self-motivated, professional, tenacious and enthusiastic
• Strong ownership of tasks, attention to detail and following through to conclusion
• Ability to work under own initiative to plan and communicate effectively with colleagues
• Ability to plan, organise and follow through on assigned tasks and complete tasks
• Ability to learn and develop new skills and take on new challenges
• Experienced in ISO 27001:2022
• 3-5 years working within the auditing and ISMS field
• Experience working within recognised Information Security frameworks and best practices such as ISO27001, NIST etc.
• Experience with information security management systems
• Degree in IT or similar long experience in an information security professional environment including auditing
• Knowledge / experience of ISO 27001, TickIT Plus & Cyber Essentials Plus
• Robust knowledge of information security frameworks
• Member of professional body(Desirable). (e.g. Chartered Institute of Information Security (CIISec)

Location on this role can be Flexible on Aberdeen, Warrington or Chesterfield.

Carbon60, Lorien & SRG – The Impellam Group STEM Portfolio are acting as an Employment Business in relation to this vacancy.