Our client is a financial services firm with operations across Europe.
This is an opportunity for a Senior IT Information Security Specialist to take the next step into a management role. This is a client facing specialist Information Security role providing guidance to both external Clients and internal business units to ensure delivery and oversight of an effective Information Security Framework across the Division and to ensure delivery and oversight of information security practises; to ensure alignment to the internal information security framework; to meet specific client contractual requirements; and ensure that security risks are identified and effectively managed.
You will be a member of the CIBS Information Security team, which sits within the Risk and Compliance Function operating as a second line in the 3 Lines of Defence model.
Key Accountabilities
• Providing specialist Information Security input to support business operations, change initiatives and Bids to ensure that security risks are identified and managed.
• Definition of Security Requirements and sign-off throughout development and change processes.
• Ensuring delivery against Client information security requirements.
• Oversight of Information Risk across client and internal business units.
• Oversight and communication of Client specific Information Security MI.
• Acting as the key Information Security contact for allocated clients.
• Representing Information Security at relevant risk committees.
• Providing SME guidance to Information Security related audits and reviews and ensuring action resolution (internal, external and client driven) to ensure that business units understand issues and remediation effectively mitigates information security risks.
• Conducting information security reviews across the business and recommending appropriate actions to management.
• Conducting investigations, analysis and review following breaches of Information Security controls and preparing recommendations for appropriate control improvements, involving other professionals as required.
• Interpreting and applying information security policy and standards, and contributing to the development of these documents including delivery and development of education and training materials.
• Identifying threats and providing authoritative advice and guidance on the application and operation of all types of information security controls.
• Horizon Scanning - keeping abreast of external events, imminent industry and regulatory changes.
• Actively maintaining specialist knowledge.
• The role will be based in Dublin, but will involve some travel to other sites which may include Belfast, the Isle of Man, Glasgow and Cheltenham.
Key Performance Indicator
• Client contractual reporting/other deliverables.
• Committee Updates and ad-hoc reports as required.
• Internal risk identification and reporting.
• Information Security Incident investigation and reporting
• Audit issues tracking and resolution.
• Due Diligence Reports.
• Internal and Client Feedback.
• Competence Knowledge Skills
Essential Experience/Skills:
• Qualified to degree level or equivalent experience.
• Certified Information Systems Security Professional (CISSP) and/or
• Certified Information Security Manager (CISM) and/or
• Certified Information Systems Auditor (CISA)
• Good technical knowledge with the ability to explain technical problems to non-technical business stakeholders at all levels.
• Aptitude to remain up to date with Information Security Standards and Technology.
• Self-motivated individual with flexible approach to working.
• Effective and persuasive in both written and oral communications.
• Experience of working in Private Sector organisations.
• Current Driving License.
Desirable Experience/Skills:
• PCIDSS knowledge/experience
• ISO27001 Auditor
• Continuous improvement
• Experience of working within a financial services/regulated or outsourced service provision environment.
To apply for the Information Security Manager role please contact Hugh McCarthy on 01 662 1000
Email me jobs like this
