Information Security Officer Contract

Information Security Officer | Remote | £275 per day outside IR35

We are recruiting for an Information Security Officer to join the Architecture and Governance Team the role will be 100% remote working but will be office based when conditions allow.

As a key member of the team you will act as an Information Security subject matter expert managing ISO27001 certification, supporting the Group’s Information Security Management System, responding to internal audits and a range of third party information security audits and reviews.

The main tasks will include:

• Maintaining the Group Information Security Management System providing advice and guidance to stakeholders, employees and managers within the organisation.
• Manage the ISO27001 accreditation process including the conduct of internal and external certification audits.
• Support Group initiatives to improve Information Security Management which include Security CMMI upgrades and security policy upgrades.
• Support security audits conducted by regulatory bodies and partner organisations.
• Assist with governance and assurance tasks related to acquiring and monitoring supplier organisations.
• Manage and maintain information security risk and issues assessments ensuring that controls and actions are kept up to date.
• Provide accurate, informative and relevant MI to various interested parties including Board, Risk Committee and ERGO Group.

As an Information Security Officer you will have:

• An ISO27001 certification such as Lead Implementer or Lead Auditor. (Essential)
• Experience of having managed the ISO27001 certification/recertification process. (Essential)
• Experience of supervising internal ISO27001 audits. (Essential)
• A good understanding of IT and information security controls. (Essential)
• The ability to work independently or with minimal supervision. (Essential)
• Strong analytical and research skills with excellent report writing and communication skills. (Essential)
• Relevant security qualifications such as CISSP, SSCP, Security+. (Desirable)