Chief Information Security Officer (VA251)

Carey Olsen
Chief Information Security Officer (VA251)

Location:

• Jersey
• Guernsey
• Southampton
• London

Department: Technology

Experience: 5 years’ experience in a relevant information security role. Functional understanding of IT operations and systems, including security procedures

We are currently recruiting for a Chief Information Security Officer, to hold responsibility for leading the development, coordination and implementation of the Group’s information security and data protection programmes.

Main duties will include but are not limited to:

• To inform and advise the Group in respect of information and cyber security risks and issues
• Responsibility for defining, developing and managing the Group’s information security strategy and ongoing development programme
• To define and embed the ISO 27001 Information Security Framework across the Group that addresses the needs of the business, its staff, clients, and other external stakeholders in line with relevant legislation and industry standards
• Drive and deliver continuous improvement to the Group’s Information and Cyber Security systems, processes and procedures. Develop and lead an effective, high-performance Information Security and Data Protection function
• Establish and maintain clear and measurable Information and Cyber Security strategic plans, budgets and targets, and robust and fit-for-purpose operational procedures and deliver continuous improvements that ensure all elements of the service represent the best value for money
• Ensure that the Information Security and Data Protection resources and budget are managed effectively, in accordance with all applicable policy and procedures
• To be the point of escalation for all information security alerts and breaches and coordinate responses via incident management protocols
• To conduct regular monitoring to ensure security practices, policies and procedures are being followed, evidencing Group compliance as required by appropriate certifications, identifying areas for improvement, making recommendations to address identified failures, agreeing remedial actions and timelines for delivery
• Ensure management information is fit for purpose and is available on a timely basis to the Group’s Risk Committees, Carey Olsen Boards and Regulatory Authorities
• Collaboration with the Technology department to ensure that the Group’s security practices meet all applicable requirements
• To manage all client and regulator requests for detail on the Group’s information security controls (client audits / questionnaires)

The ideal candidate will hold a recognised information security qualification, with at least 5 years’ experience in a relevant information Securityrole and expertise in complex regulatory and contractual requirements. An ability to create effective compliance systems will also be useful.

Please click on “Apply Now” to submit a CV for this vacancy.

If you are interested in this vacancy please apply and submit your CV.