Great opportunity within a dedicated Cyber Security Provider!
must be eligible for SC security clearance and able to spend regular time in the office
Due to growth, we are looking for someone who comes from a consultancy background but would like work for a company who are solely security focussed.
As part of the Information Security & Compliance team you will work on number of external and internal security projects including implementing and auditing ISO27001.
Ensuring the protection of information assets and technologies
Contribution to completion of security related audits such as ISO27001, ISO27701, ISO20000, NIST-CSF, IASME Governance
Conduct and document internal audits for both internal and external
Hands-on experience in implementing and auditing ISO27001 is required
Experience delivering security awareness training or and be comfortable with public speaking
Manage Third Party Risk Management (TPRM) including vendor security programme reviews,
Support on scoping engagements and delivering a valued service to our customers
Your background
Extensive Information Security Governance, Risk and Compliance (GRC) experience as well as InfoSec Operations experience
Experience contributing to an Information Security Management System (ISMS) certified to ISO27001 standards
Good knowledge of the Cyber Essentials Plus Scheme as well as UK & EU General Data Protection Regulation (GDPR) and the Data Protection Act (2018)
Ideally relevant qualifications such as ISO/IEC 27001 Lead Implementer, ISO/IEC 27001 Internal Auditor, CISM/CISSP
