My client, a growing FinTech organisation in London are looking for an Operational Resilience Specialist to join on a 6 month initial period.
What my client is looking for:
- Experienced Information Security GRC Specialist with a focus on ISO27001 and DORA
- Experience is implementing an ISO27001 management system is desirable.
- Experience of GDPR is desirable
- Deep understanding of ISO27001 certification requirements and controlsknowledge of DORA (Digital Operational Resilience Act) principles and practices is preferred
- Regulatory and banking experience is desirable, particularly in the context of European regulations Experience of managing internal & external audit activities, reports and remediation
- Someone who is proactive / takes the initiative, resilient, and a natural problem solver
What you’ll do
- Ensure ISO27001 and DORA principles are incorporated into our security practices and the business’s ways of working
- Management of Internal and External Audit activities to include reporting, Management Information, remediation and tracking
- Support activities necessary to successfully undertake CBI, FCA, Banking, ISAE, ISO, Audit or ICO reporting requirements.
- Support the development, revision and implementation of Information Security governance policies, procedures, standards and controls and ensure that these are fully embedded in the activities of all teams and run the information management security forum for the business entity
- Provide strong central oversight to deliver consistency and quality in security compliance within the organisation.
- Regular controls of Information Security Risk Management, non-conformities, treatment plans and Key Risk Indicators.
- Raise, monitor, action Security Incidents, Alerts, Service & Change Requests
- Regular contact with Management to convey control weakness findings identified through walkthroughs and testing, assess the risk and impact of deficiencies and make recommendations for remediation.
- Assist with the Penetration Testing schedule and Cyber Threat Intelligence platform by tracking and resolving vulnerabilities identified, across multiple teams (including Infrastructure/Development)
What you’ll have
- Minimum 10 years’ experience required, degree educated. Information Security industry standard qualifications such as CISM, CISSP, CISA, CRISC required (additional certifications desirable such as: CCSP, CCAK, PCI DSS, ITIL and/or AWS/Azure Cloud Security certifications)
- Extensive Security Governance, Risk & Compliance with hands-on experience of implementing and ongoing management annual certifications, e.g. ISO27001:2022, PCI DSS, etc
- Has experience of cyber threats facing the Financial Services Industry
- Ability to work with staff at all levels, up to and including C-Suite and works well under pressure both independently and within a team
- Extensive experience in writing and reviewing Information Security policies, standards and procedures.
If this role is for you please apply to this job advertisement or call me on 0207 509 8040 to find out more.
Robert Walters Operations Limited is an employment business and employment agency and welcomes applications from all candidates
