About this role
Completion of information security and third-party risk assessments
- 3+ years’ experience of technical information security and third-party risk
Assessments
- Knowledge of industry recognized information security and data privacy standards such as Cyber Essentials, ISO 27001, NIST Cybersecurity Framework, CIS Top 20 Controls, GDPR
- Good working knowledge of Service Now IRM and GRC tools
- Good working knowledge of information security controls
- Ability to communicate effectively with a broad range of stakeholders, both internal and external, at all levels
- Strong analytical and problem-solving skills, with excellent attention to detail
- Definition and explanation of information security and third-party risks
- Ability to reflect business drivers and risk appetite in risk assessments
Security certifications such as CISSP, CISM, CRISC are desirable