Viewing Job

Information Security Consultant - Finance - Inside IR35

Contract
Mar 29, 2024 19:13
Manchester
Inside IR35, Financial Services, London, Information Security Consultant, ISO27001, Security Subject Matter Expert, NIST CSF, Risk Management, ISMS, CISSP, CISMMy leading financial services client is looking for an Information Security Consultant to focus on the development and maintenance of my clients Information Security capabilities. You will drive the identification, development and maintenance of policies, standards, principles, guidelines, and corresponding control framework to protect Confidentiality, Integrity and Availability of the clients information. You will provide information security expertise and advice to the business, IT change programmes, supplier assurance, strategy & architecture and undertaking 1st Line of Defence assurance activities as part of internal and external compliance requirements along with colleague security and awareness training activities.SkillsProven expertise in Information Security Assurance experienceExperience of implementing and maintenance of an ISO27001 aligned/certified ISMS.Expert knowledge of information security, risk management and governance, data protection and related technical expertise - Clear understanding of multiple security frameworks including Cyber Essentials, ISO27001 and NIST CSF.Strong communication skills both verbal and written - Proven experience in administering / reporting on relevant control frameworks in a Financial Services organization. Qualifications: -professional accreditation: - E.g. ISO 27001 / CISSP / CISM - Technical qualifications in IT Security management and Incident response Degree/gradesYou will be a Security Subject Matter Expert (SME), offering guidance, direction and approvals on various aspects of security, solutions and approaches through review of new business proposals, coordinating with technology and business groups to support risk assessment, business impact analysis, implementation of appropriate controls, and monitoring of Information Security risks/hazards and monitoring of status. If this role sounds of interest please send me you cv for a further conversation