Senior Information Security Compliance Officer

Full Job Description

Senior Information Security Compliance Officer
3-6 Month Contract
Inside IR35
Hybrid - London (1-2 Days Per Week Onsite)

We are looking for a Security Compliance office who can manage and mitigate risks related to information and cyber security across the business. The organisation is within the Media sector so any experience within this field in security would be greatly advantageous.

Responsibilities:

• Perform risk assessments and audits of the information and cyber security practices of the organisation and its third parties, including vendors, suppliers, and contractors.
• Identify, evaluate, and quantify the information and cyber security risks associated with the organisation's and its third parties' activities, processes, systems, and data.
• Develop and implement risk mitigation strategies, controls, and action plans to address the identified information and cyber security risks.
• Monitor and report on the effectiveness and compliance of the information and cyber security risk management framework and activities.

Essential Skills:
- Experience of data analysis and systems auditing.
- Experience with vendor risk management.
- Able to delve into granular levels of detail.
- Ability to analyse and interpret information quickly.
- Experience in conducting and reviewing cyber risk assessments of third parties, using various methods and tools (e.g. questionnaires, audits, scans, etc.).
- Excellent analytical, problem-solving, and decision-making skills, and the ability to identify and quantify information and cyber security risks and their impacts.
- Strong knowledge and understanding of the information and cyber security standards, policies, and regulations, such as NIST, ISO, PCI-DSS, GDPR, and CIS.
- Understanding of General Data Protection Regulations (GDPR)

If you are interested, please apply here or reach out to me directly on (url removed)