Information Security Risk and Assurance Specialist
Glasgow or Edinburgh
Hybrid working
Change Digital are partnering with a leading global law firm to assist in their search for a Information Security Risk and Assurance Specialist. The successful candidate will join an experienced team that covers assurance and Risk within IT across the organisation.
This position will be responsible for measuring risk levels and helping identify any improvements required.
The ideal candidate will have in-depth knowledge and understanding of the Information Security and IT risk management requirements and practices.
You will be responsible for a range of activities, including:
- Periodically reviewing and maintaining the Information Security and IT risk management policies as appropriate
- Working closely and building relationships with stakeholders in Information Security, IT, the global Risk department and across the wider organisation
- Developing and managing the Information Security and IT risk register
- Assessing and managing risks that could materially impact the ability for IT to deliver its commitments to the business
- Providing education to develop the skills within Information Security, IT and other business areas
Skills and Experience
- Experienced in risk management and international information security standards, practices, risk management and control frameworks e.g. ISO31000, IRAM2, NIST 800-53 and cybersecurity framework. ISO27001/2, COBIT, ISF SOGP, CPS-234 etc.
- Organised with the ability to handle multiple conflicting priorities and work to tight deadlines
- A confident and diplomatic communicator, able to explain risk concepts and technical terms in a way that everyone understands
- Detail-orientated, accurate and proactive when it comes to driving initiatives forward
If you are looking for your next career move and have some of the skills listed above, please forward your latest CV for immediate consideration.
