Information Security Consultant

This job has now expired please search on the home page to find live IT Jobs.

Information Security Consultant

My client are looking for an experienced Information Security Consultant to join their team in Staines, London.

This role is part of a team that deliver SMART Security, Cyber Threat Intelligence, Vulnerability Management, Incident Response, Security Administration, Assurance and Investigations capabilities across the group.

The Role

* Acts as a Subject Matter Expert (SME) delivering standard security services within the project lifecycle across Centrica programmes and change portfolio

* Identify, agree and implement functional and technical solution requirements into projects and changes in-line with Centrica Security Standards Policies

* Provide standard and bespoke security design advice to projects across infrastructure, operating systems and applications

* Review and amend (as appropriate) project document sets such as Solution Designs, Low Level Designs and Project Plans

* Work with Security Operations to ensure transition of projects into Business as Usual (BAU) is accounted for, such as security processes, procedures and supporting service-level agreements (SLAs)

* Identify, assess and manage information security risks within the clients programmes and change portfolio

* Influence stakeholders to address identified Information Security risks

* Accurately estimate and forecast time required for project engagement to support resource planning and demand fulfilment

* Interfacing within the Information Security team to deliver project assurance activity in areas such as PCI, application security, data security, etc

The Person

* Experience of articulating technical topics in non-technical language presenting the business value of security

* Experience of securing and providing assurance for SAP systems and components

* Knowledge of core infrastructure components e.g. DNS, Active Directory, Exchange, Proxy management, Public Key Infrastructure, Firewalls, Load Balancers, Database, API gateways

* Experience of working on a large range of project sizes, from a programmes of work, though to small and complex projects

* Familiarity with industry best practise frameworks and standards such as ISO 27001, NIST and PCI DSS

* Knowledge of security products such as Endpoint Protection, Security Incident Event Management, Intrusion Detection/Prevention, Content Inspection, Data Loss Prevention, Encryption

* Experience of securing public cloud hosting environments is highly desirable

* CISSP, CISM or comparable security qualifications are highly desirable