Information Security Officer
- Location
- Reading, England, United Kingdom
security controls are operating effectively and that risks are being identified and managed. Key Responsibilities Maintain and continually improve the organisation's Information Security Management System (ISMS) , including policies, procedures and controls. Support the implementation and ongoing management of ISO 27001, Cyber Essentials Plus, PCI-DSS, NIST/… testing and remediation of findings. Manage technical security risks within Data Protection Impact Assessments and policy exceptions. Support the vendor and third-party risk management programme, including assessment and ongoing monitoring of critical suppliers. Work with technical teams around identity and access management, including SSO and federated services ...