Information Security and IT Risk Manager - Sanderson : Job Details

Information Security & IT Risk Manager

£700-800/day overall assignment rate to umbrella

Based in London - one day a week on-site

6 month contract

A leading financial services client are looking for an interim Information Security & IT Risk Manager to join their risk function, overseeing the management of Information Security and IT Risk within the business.

This is a high-profile position, which will require facing into senior stakeholders of the business to challenge and negotiate whilst building/maintaining relationships.

Information Security & IT Risk Manager, key skills:

• Extensive experience in IT risk management and information security risk management
• Strong understanding of risk management framework
• Excellent relationship and stakeholder management skills
• Cyber security framework, NIST
• Financial services industry experience
• Knowledge of network architecture
• Knowledge of cloud computing concepts
• Identification and management of project risks, assumptions, issues and dependencies (RISK)

Responsibilities:

• IT and IS Controls testing review: This involves assessing the effectiveness of IT and information security controls to ensure compliance with regulations and mitigate cybersecurity risks (We use COBIT as a referential).
• Recording of the second-line findings in a report: Candidate will be responsible for documenting the findings from the review in a report, which will help track and address any identified issues.
• Defining the Mitigation plan: Candidate will be involved in developing a plan to mitigate any identified risks or weaknesses in controls.
• Liaising with the first line and guiding them on how to implement the defined action plan: This is a coaching and support activity where Candidate will collaborate with the first line of defense to ensure the effective implementation of the action plan.