Information Security Assurance Specialist

Information Security Assurance Specialist (ISO 27001 / Cyber Essentials +)

Hybrid working: 3 days per week required in the office.

Reporting into my clients Information Security Manager, the Information Security Assurance Specialist will focus on identifying where security assurance testing of the firm’s systems and processes is required, commission the required tests from relevant suppliers, and manage their findings through to resolution.

It will provide security assurance in relation to the IT project and change management lifecycles by identifying security requirements, reviewing project design documentation, and working with technical stakeholders to mitigate information security risks associated with technical change requests.

It will also assist in managing the firm’s information security management system (ISMS), including maintaining policies, producing management reports, and supporting compliance activities.

Required Skills / Experience:

• Strong experience of working within an Information Security / Technical Cyber Security role within a regulated environment or organisation alligned to ISO27001 (ideally professional services).
• Strong knowledge of ISO27001 and Cyber Essentials Plus standards
• Strong experience in Information Security Assurance

Information Security Assurance Specialist (ISO 27001 / Cyber Essentials +)