Listing Description

Overview

This opportunity is with a leading financial technology company, providing underwriting solutions to Tier-1 and Tier-2 companies around the world. Our cloud-based software solutions are used by companies across the world and by thousands of users, daily.

Primary Responsibilities

We are looking for an IS Compliance Officer to support the Information Security Organisation in managing and securing information. This role will help us deliver on our Information Security Strategy. As a highly driven Information Security Lead you will help us establish and implement SOC2 controls and maintain our ISO27001 certification as well as all other contractual requirements, continually review our security profile and recommend solutions to ensure our data and information is appropriately secured.

Reporting to the Information Security Officer, the role will include development or enhancement of the following key areas:    

• Maintain and improve our Information Security Management System based on the ISO27001 series standards.


• Support the implementation and monitoring of SOC2 controls.


• Maintain the Information Security Risk Register and work to implement mitigating controls.


• Carry out Information Security risk assessments and audits of controls, infrastructure, applications & 3rd party suppliers.


• Monitor compliance and perform audits to ensure adherence both with internal Information Security policies and applicable laws and regulations such as GDPR.


• Maintain and update the Controller record of processing activities (RPA).


• Manage, improve and support Information Security Awareness Training and Communication programs.


• Monitor emerging security threats, control technologies and industry trends.


• Support the Business to ensure we comply with Information Security best practice.


• Manage Information Security projects.

Qualifications

• Ideally a Degree in Business Information Systems, Computer Science, or Information Security related disciplines.


• Candidates must have some experience of working in or implementing Information Security controls based on SOC2, ISO 27001 or equivalent.


• Relevant certifications an advantage.


• Candidates should have a strong understanding of technology and experience in applications, operating systems and databases, networks & cloud platforms.


• Experience with Information Security compliance, risk management and data privacy.


• Excellent collaborative and people skills.