Information Risk Assessment - Assistant Manager - MFT - KGS CH

Completion of information security and third-party risk assessments

• Completion of information security risk assessments for projects, initiatives, business applications, services and technologies within agreed SLAs

• Scheduling and completion of periodic risk assessments of business solutions, technologies and third parties based on their risk classification

• Identification, definition and rating of risks

• Explanation of risks and their impact on stakeholders

• Provision of information security risk management support and advice to risk owners, risk action owners and other stakeholders in determining risk management options and action plans

• Completion of third-party information security risk reviews

• Review of supplier information security contractual clauses

• Stakeholder management and liaison

• 3+ years’ experience of technical information security and third-party risk

Assessments

• Knowledge of industry recognized information security and data privacy standards such as Cyber Essentials, ISO 27001, NIST Cybersecurity Framework, CIS Top 20 Controls, GDPR

• Good working knowledge of Service Now IRM and GRC tools

• Good working knowledge of information security controls

• Ability to communicate effectively with a broad range of stakeholders, both internal and external, at all levels

• Strong analytical and problem-solving skills, with excellent attention to detail

• Definition and explanation of information security and third-party risks

• Ability to reflect business drivers and risk appetite in risk assessments

Security certifications such as CISSP, CISM, CRISC are desirable