About this role
Define, lead and deliver the information security and third-party risk assessment programmes.
- 5+ years’ experience in information security and third-party risk assessments.
- 3+ years in a senior management role.
- Risk definition including explanation of technical risks to non-technical audiences.
- Strong working knowledge of infrastructure, application, service (including cloud) and application security and mitigating controls.
- Senior stakeholder management.
- In depth understanding of security, risk and data privacy standards such as ISO 31000, ISO 27001, ISO 27701, IRAM, CIS, SOC 2, GDPR, ISO 27701, etc.