Information Security Officer - 3rd Party Supplier Assurance

Sanderson ,
Edinburgh, City of Edinburgh
Job Type: Full-time
Salary: £50,000 per annum

Overview

Information Security Officer - 3rd Party Supplier Assurance Edinburgh £50,000 - £60,000 benefits Fantastic new opportunity for an experienced Information Security Officer with this market leading financial services business based in Edinburgh. The role is to join an existing team of Information Security and Data Protections specialists, as an Information Security Manager. The team manages Information Security and Data Protection for all UK business lines and UK office locations. Reporting into the Senior Information Security Manager and focusing within 3rd Party Supplier Assurance this role will support the Enterprise Information Security Team in delivering the information Security strategy for the business, and aligning this with the Global Information Security strategy. Activities will include consulting on information security issues, monitoring compliance to information security policies and championing the global standards across the UK business. Main responsibilities: Plays a key role in the successful delivery of an Enterprise Information Security Function. Understand and input towards the mapping of the Security Strategy & Architecture Roadmap & Standards to protect information assets. Provides technical support and guidance to project teams and other business areas in relation to Information Security. Validate delivered solutions against approved security architecture. Support the development and delivery of Information Security training materials and awareness for use across the business. Assesses and recommends tools and techniques which will implement the architecture in a cost effective and efficient manner. Input as an SME to UK security policies, ensuring they are fit for purpose and maintained in line with best practice and global security requirements. Engage with external suppliers as appropriate to manage the penetration testing schedule. Skills Required: Proven experience of working within a similar Information Security Officer role. Extensive experience with 3rd Party Supplier Assurance. Good knowledge and understanding of Financial Services regulatory/compliance requirements in information security and data protection. Risk assessment/risk management skills. Security, including information security management, physical security, application security, network security and security incident management. Good stakeholder management skills, with an ability to understand and communicate technical detail to a non-technical audience. Understanding of how to apply Information Security best practice to large scale enterprise environments. Good technical knowledge the security impact on established and up and coming technologies. Key understanding of working in a Digital business and the impact on information security. Experience of working in information security management and/or related functions (such as IT audit and IT Risk Management) in financial services. For any further queries regarding the role, please contact Danny Palmer on or at