Devonshire Hayes have partnered with a fantastic organisation to help them secure a InfoSec Governance & Compliance Lead. You will be tasked with the following,
- A deep understanding of the principles of Information Security
- Knowledge of information security frameworks such as ISO27001, Cyber Essentials, etc
- Excellent communication skills and proven ability to produce concise, clear and well-structured written work.
- Good SharePoint and other MS Office skills
- Knowledge of data privacy issues, eg Data Protection Act/GDPR
- Excellent interpersonal skills
- Responsible for leading and managing Information Security Management System
- Responsible for defining and maintaining security policies and documentation
- Responsible for defining and leading the ISO 27001 audit programme including management of non-conformities and remedial actions
- Defines and manages Information Security training and awareness programmes for the Business
- Working alongside stakeholders within ICT and across the business to align policies, ways of working and deliver audits
- Providing information governance guidance and support to the business, eg contract bids, client audits, risk assessment etc
You will be required to work in the office 4 days per week.