2 of 2 ISO 31000 Jobs in the Thames Valley

established risk process, relevant controls and support internal and external assessmentsSupport the business in achieving and/or maintaining security accreditations such as ISO 27001, CE+, IPSA, industry related standards, FSC, NIST, etc.Provide subject matter expert input in maintenance of relevant process documentation as required in addition to owning … policy, process, ToRs, training, etc.Skills and Experience Has experience in Risk Management roleExperience in monitoring compliance with security accreditations/standards such as ISO 31000, ISO 27005 and ISO 27001 (or similar security standards)Good communication and engagement skills are vital for this role ...

lifecycles (SDL) Good understanding of enterprise-scale security management process and infrastructure Exposure to current information security standards and regulations such as PCI-DSS, ISO 27001, SOX, UK DPA Exposure to enterprise IT infrastructure and tools (e.g. Microsoft, Cisco, Sun, Oracle) Experience of transactional revenue systems, embedded systems, smartcards … systems Knowledge of cryptographic services Knowledge of wider security, audit, risk and compliance standards e.g. PCI-P2PE, PCI-POI-PTS, ISO 22301, ISO27005, ISO31000, NIST, GDPR Understanding of security within agile/DevOps and waterfall project methods, product development Experience of application security testing tools, e.g. SonarQube In depth ...