InfoSec Officer - Harnham - Data & Analytics Recruitment : Job Details

Strategy & Governance:

• Develop and maintain the company's information security policies, standards, and guidelines.
• Create and implement a comprehensive cybersecurity strategy aligned with business goals.
• Act as the primary advisor to senior leadership on cybersecurity risks and mitigation strategies.

Risk Management:

• Identify, assess, and mitigate security risks across the organization.
• Conduct regular risk assessments and vulnerability testing.
• Ensure compliance with regulatory requirements (e.g., GDPR, PCI DSS, SOC 2, ISO 27001).

Incident Response:

• Lead efforts to respond to security breaches and incidents, minimizing impact and ensuring a swift recovery.
• Establish and manage an incident response plan, including regular tabletop exercises.

Technology & Operations:

• Oversee security operations, including firewalls, intrusion detection systems, endpoint security, and SIEM tools.
• Partner with IT to implement secure architecture and configurations.
• Ensure data encryption and secure storage of sensitive customer information.

Training & Awareness:

• Develop and deliver security awareness training for employees to foster a security-conscious culture.
• Communicate complex security concepts to non-technical audiences effectively.

Vendor Management:

• Assess and manage the security posture of third-party vendors and partners.
• Conduct due diligence on vendors and ensure adherence to contractual security requirements.