Information Security Officer - ISO 270001 - NIST - Incident Response - Phishing - Contract - Hybrid

Information Security Officer - ISO 270001 - NIST - Incident Response - Phishing - Contract - Hybrid

My client who are leaders in their field are looking for an Information Security Officer who will Manage the evolution of the company's Information Security policies to maintain best practice and alignment with Corporate and Regulatory requirements including the Global Information Security Group framework(GISG), General Data Protection Regulation (GDPR), Sarbannes-Oxley (SOX) & ISO27001

Key Responsibilities:

• Working in partnership with the Data Protection Officer (DPO) & Legal & Compliance to protect the organisation's information.
• Proactively raising the profile of Information Security across the organisation, its stakeholders, vendors and customers.
• Providing consultation and/or education as needed and drive the adoption of information security as best practice.
• Working in partnership with the Business teams to ensure all Projects, Changes, policies and procedures are compliant with corporate information security policies.
• Management of the annual Security Incident Response Test (SIRT), as well as ensuring the remediation of any findings.
• Undertake Security related Testing, including Phishing, Security Incident Response Tests.
• Co-ordinate response to security incidents and breaches to ensure any impact is contained and relevant information obtained to facilitate analysis and improvement plans
• Overseeing Audit Findings and any associated Remediation
• Maturing the Information Security mindset