Glasgow, Lanarkshire, Scotland, United Kingdom Hybrid / WFH Options
Stott & May Professional Search Limited
information and cloud security, particularly Azure and Microsoft 365 . Hands-on experience with SIEM, DLP, IAM, EDR, WAF, and SASE tools. Solid understanding of frameworks such as ISO27001, NIST, CIS, and the Well-Architected Framework . Relevant qualifications such as CISA, CISM, SABSA, or TOGAF (preferred). Excellent communicator who can translate complex security More ❯
Carlisle, Cumbria, England, United Kingdom Hybrid / WFH Options
Cumberland Building Society
Assurance Team. You’ll assist in the oversight and control of all aspects of the Information Security Management System, ensuring controls and assurance audits are in place to prevent / minimise threats such as security breaches, computer viruses or attacks by cyber criminals as well as carrying out audits in line with the assurance calendar. You’ll build key … relationships with all teams / colleagues across the Society and work closely with 1st line risk colleagues, Payments and Technology. You’ll manage the relationship with Qualified Security Assessors (QSAs); coordinating annual assessment and remediation activities, Regulatory Bodies; providing evidence and reporting for PCI compliance, and Third-Party Service Providers; completing assurance reviews and compliance verifications for suppliers handling … e.g., CISM. Where significant experience can be demonstrated, this will be considered You’ll have in-depth knowledge in information security, having very good experience of compliance such as ISO27001, NIST, PCI DSS, REP018, CBEST & CQUEST requirements, ideally holding the PCI Internal Security Assessor qualification. Skills, abilities and behaviours: Excellent interpersonal, written and verbal communication skills and the ability to More ❯