Information Security Risk Manager £60,000 - £70,000 + bonus + pension + benefits Permanent London
CVs by 26th February 2021
Meraki Talent's Global Investment manager are currently looking for a Information Security Risk Manager to join them on a permanent basis.
The role will be highly flexible and will collaborate with the Global Information Security team to develop, embed and facilitate an appropriate and robust global Information Security risk management and assurance framework. This framework will be integrated into the broader risk management framework. The candidate will work collaboratively with Risk Management colleagues in all regions, and the Global Information Security team to ensure adequate and appropriate systems and controls are in place to identify potential adverse events, including hardware and software crashes, physical disasters, malicious intruders, malware, denial of service attacks and employee misconduct. Responsibilities of the Information Security Risk Manager.
Equip the business with the relevant tools, information, and materials to allow the business to make risk-based judgements and decisions in line with strategy, risk appetite, business opportunities and operations.
Develop, maintain, and facilitate the firm's risk management framework, policies and procedures.
Manage oversight of business risks and controls including assurance activity, risk assessments and controls testing.
Manage business risk reporting internally to appropriate boards and committees, and externally to clients, consultants, and regulators.
Background of the Information Security Risk Manager.
Excellent analytical kills
Working knowledge of Information Security Risk Management
Proven experience in Information Security Risk Management processes
Flexibility in approach, ability to adapt practices, effectively react to internal and external events and activities.
Achieve quick and considered decision making and embrace change.
Pro-active approach to tasks and to be accountable and take ownership for things.
Attention to detail and the ability to constructively resolve problems and improve processes and procedures.
Good judgement regarding prioritisation of tasks; taking the lead; and escalation.
Working knowledge of security frameworks/standards e.g., ISO 27001, HMG Cyber Essentials or NIST Cybersecurity Framework
Ideally, Certified in Risk and Information Systems Control (CRISC) or other risk management certification.
Is this job for you? At Meraki, we love recruitment and love words. Is this you?
Andy wants: Information Security, Risk Manager, CRISC, ISO27001, NIST, Stakeholder Management, HMG Cyber Essentials
Please see our website page headed (e.g.) 'Privacy Notice' for an explanation about how we use information we collect about you.
