About the role

You will work closely with stakeholders to provide expert advice on information security matters, support risk assessments and assurance activities, lead the development and improvement of policies and standards, and promote compliance with the security framework in a pragmatic and solution-oriented manner. The role also includes providing leadership on GRC initiatives, mentoring colleagues, and helping to shape and strengthen overall security posture.

Requirements

• Experience operating as part of an Information Security or Governance, Risk and Compliance team, providing advice, support and services to a wide range of stakeholders.
• Experience leading or contributing to security risk assessments, assurance reviews, audits, compliance activities or security governance initiatives.
• Strong knowledge of information security governance, risk management and compliance principles, with the ability to apply risk-based thinking to complex situations.
• Experience developing, reviewing or implementing information security policies, standards, guidance or frameworks.
• Excellent written and verbal communication skills, with experience producing reports and presenting information to both technical and non-technical audiences.
• Experience building effective relationships with stakeholders at all levels and providing pragmatic, customer-focused security advice.
• Relevant degree or equivalent professional qualifications and experience.