Information secuirty officer

This job has now expired please search on the home page to find live IT Jobs.

As the Information security officer, you will have the autonomy to make decisions regarding the security operations, in conjunction with the infrastructure manager and head of IT.

You will be entering a fast paced, pressurised environment where you will need to hit the ground running with projects related to risk assessments and audits, as well as providing technical expertise.

Responsibilities:

* Prepare IT security standards and defining the company's reference architecture.

* Assist development of policies and procedures.

* Provide security input into technical architectures, designs and typologies

* Perform risk assessments of technical architectures;

* Perform security supply chain risk assessments;

* Deploy Office365 policies

* Keeping the wider business up to date and informed of security changes;

* Stakeholder management

* Assist in delivering the wider information security strategy and governance, risk and compliance programme initiatives.

Requirements:

* Must possess a general understanding of information security risk management, such as ISOIEC 27001:2013, Octave-Allegro, ISOIEC 31000, ISF iRAM2.

* Prior experience with vulnerability & patch management programs and tools, change control and general IT governance processes;

* Must have prior experience in designing solutions and controls for regulated environments

* Must possess a good understanding of IT architecture and security architecture methodologies

* Must be experienced with cyber security controls including Firewalls, DDoS, IPS/IDS, Proxy Solutions, Web Application Firewalls, multi-factor authentication, PKI's, anti-malware protections, anomaly detection, SIEM, etc

* Must be experienced with modern application development methodologies and security techniques and tools which can be deployed;

* Must possess a good understanding of risk management, security architecture, common design flaws/weaknesses, and vulnerability analysis;

* Must have a general understanding of data protection and privacy requirements and regulations, specifically the new General Data Protection Regulation and HIPPA;

* Research emerging threats, vulnerabilities, and security practices/standards to maintain professional relevance and assist during the response to security incidents affecting or potentially affecting the organisation.

To find out more about Computer Futures please visit www.computerfutures.com

Computer Futures, a trading division of SThree Partnership LLP is acting as an Employment Business in relation to this vacancy | Registered office | 1st Floor, 75 King William Street, London, EC4N 7BE, United Kingdom | Partnership Number | OC387148 England and Wales