Willis Towers Watson
,
Reigate, Surrey
Junior Information Security incident Handler- FTC
Overview
Job Description
Summary of Role Initial fixed term contract for 12 months with possibility to extend or convert to permanent employee. The Junior Information Security Incident Handler works as part of the Information and Cyber Security department, providing triage, coordination and ownership of reported security incidents thought the entire life of the incident. This may include for example where data is incorrectly disclosed (for example emailed to the wrong user), or a 3rd party is breached and we need to track and identify the impact to Willis Towers Watson. The role will interact directly with users from our business, and liaise with specialist teams such as legal, privacy, business information security officers, and cyber major incident response where needed to resolve incidents. The role is not a hands on technical cyber security role, but you will be interacting on a daily basis with specialist teams. We are looking for a collaborative team player, with brilliant coordination and communication skills who likes to work in a fast pace environment. They will contribute to and work as part of a global multi-disciplined security community with clear vision and direction, and top down support across the business. The Role Responsibility: Receive and resolve reports of security incidents from across the business including: + Making a record of the incident and undertake triage to determine the severity of the incident + Lead and coordinate the resolution of incidents; including scheduling calls, issuing and tracking actions, collection of evidence + Provide timely escalation of severe incidents + Provide recommendations to resolve incidents, and identify underlying trends and potential control gaps + Ensure all incident handling and response best practices, standards, laws, act and cyber security frameworks are followed + Ensure accurate and clear communication with all stakeholders The Requirements + Demonstrable experience of working with other teams and disciplines towards a common goal + Experienced in developing knowledge and enthusiasm for Information Security + Skilled in problem solving and maintaining SLAs in a highly available environment Beneficial but not essential: + An understanding of Cyber Security + An understanding of privacy regulations (e.g. GDPR) + BSc or equivalent experience in an Information Security field Equal Opportunity Employer