Information Security Consultant / Risk Analyst
Information Security Consultant – Risk Analyst
Information Security Consultant required for my Banking client to be involved in carrying out risk assessments and provide guidance on IT security policies and standards – There are multiple positions available so there are different working location including London, Manchester, Bristol and Edinburgh.
Candidates will be required to:
- Carry out risk and control assessments to identify risks and control weaknesses within operational systems and during the systems development lifecycle.
- Carry out 3rd party risk and control assessments to identify risk and control
- Assist in developing and embedding a new IT security risk and control assessment process within the organisation
- Ensure appropriate risk reporting is provided to the Business Unit Director and their Leadership Team to give them adequate understanding of their security risk profile and controls
- As required by manager, contribute to solutions, standards, training and provision of guidance on IT security policies / standards and general IT security risk and controls matters.
Candidates will we require the following:
- At least five years Information Security / IT Security experience, preferably evidenced by a professional qualification, such as, CRISC, CLAS, CISSP or CISM
- At least three years experience of conducting IT Security risk assessments of complex IT systems, preferably within banking or financial services organisations
- Knowledge of the Data Protection Act, PCI DSS SOX
- Knowledge of current and emerging information security vulnerabilities and mitigations ranging across the technologies required for securing data centres, global networks and 3rd party access to applications and resources
- Strong process and technical knowledge of the application of IT Security tools and techniques
- Working knowledge of ISO 27001, CoBIT and Risk IT and experience in their application
- Broad technical knowledge of IT systems, including, operating systems, databases, networking solutions, security tools, applications and application frameworks
- Excellent communication skills
- Experience within banking / investment banking / large enterprise environments.
If you feel like you have the relevant experience, please apply.
Leave a Reply
You must be logged in to post a comment.