Information Security Risk Advisor vacancy in Coventry (009jc)

My client, who are one of the UK’s leading Financial Services organisations are now seeking an Information Security (IS) Risk Advisor to join their expanding team in Information Security.

You will be reporting to the Head of IS Security and your role will be as follows
• Lead the creation and ongoing management of the non-IT security elements of the information security framework (e.g. information security policies and guidance maintenance) whilst providing leadership and subject matter expertise on Information Security. The role will define and then oversee non-technology related information security policy, procedures and standards across the Society.
• The role will assist the Society understand its information security risk, with support from an information security analyst. Working with the Information Security team, shall be responsible for providing oversight of third party information security risk and principal responsibility for completion of the testing to assess compliance with information security policies and controls. The role will also require the provision of expert input to the management of information security incidents.
• The role covers all elements of information security, but weighted towards non-technical elements. The role will be expected to work constructively and collaboratively with the IT Security Risk Manager on technical matters where applicable as part of the support for the Head of Information Security Risk.

Professional qualifications or essential experience required:
• Demonstrable substantial experience of information management within the financial services sector
• Graduate calibre with appropriate industry qualifications (CISM, CISSP, ISO 27001 Lead Auditor)
• Substantial knowledge of the FS sector (desirable)
• Substantial functional knowledge of end-to-end information security policies, procedures and controls
• Effective and persuasive communicator
• Strong leadership skills
• Ability to translate technical and Information Security specialist topics into business language and vice versa
• Focus on achieving efficiency and business-enablement at the core of all information security activities

Other essential skills also needed are:
• Must be able to show discretion and maintain total confidentiality when required.
• Good planning and organisational skills.
• Ability to work on own initiative and be able to build good relationships with key stakeholders in the business.

This role would suit an individual who has come from preferably an IS background and who is seeking to join an expanding company in this sector. The key for his role is the ability to act as a conduit between the IS specialist and the rest of the company in helping them to mitigate security risks at their workplace.

They are also offering longer term development, but you will need have good understanding of the ISO 27001/2 or the relevant JSP’s and be able to hit the ground running.

In return, they are offering an excellent starting salary and the ability to join an expanding and developing team within this highly respected and liked organisation.