Information Security Consultant

Information Security Consultant required for market-leading financial services firm. The role be focused on supporting their GRC function and assisting with certification of ISO27001 Role Overview
Support the development, implementation, and maintenance of information security policies, procedures, and standards. Support the establishment and enforcement of information security best practices and controls across the Global Executive Office and Member Firms. Provide support and expertise to ensure the confidentiality, integrity, and availability of company data and systems. Mentor and guide junior team members in information security best practices Key Responsibilities
Contribute to the development of a cybersecurity-oriented culture within the global network. Support the definition of information security standards, policies and procedures for both Global Executive Office and the wider Network. Support the monitoring and reporting of a global Information Security Management System (ISMS) across 100 different locations to ensure compliance with the requirements of ISO27001. Support the recertification process to ISO27001:#####, coordinating the migration across 100 different locations. Conduct due diligence and assessments of third-party and Member Firm information security policies, standards, controls, and assurance. Assess security risks and track remediation activities for the global network. Provide advice and guidance on improvements and remediation actions to enhance security posture. Assess and manage third-party vendor security risks with respect to the Global Executive Office. Support the mentorship of the information security governance team members to foster a culture of collaboration, learning, and excellence within the team. Skills, Knowledge, and Experience
Professional certifications such as CISSP, CRISC, CISM, or CISA are highly desirable. Experience in information security, including hands-on technical expertise, along with a proven track record in team management and leadership. Strong knowledge of information security frameworks, standards, and best practices. Excellent communication and interpersonal skills. Experience with information security and IT Audit, Risk, and Technology Assurance. Excellent knowledge and understanding of information security risks and threats, with the ability effectively communicate and collaborate with stakeholders to identify potential areas for improvement. Proficiency in the concise communication of security concepts to a broad audience while demonstrating their relevance to business value. Proficiency in engaging stakeholders at all levels, interacting with individuals from diverse backgrounds, including those from business and technical domains, both internally and externally facing. Familiarity with security frameworks such as ISO27001 and the NIST Cyber Security Framework. Desirable understanding of data privacy regulations, e.g. GDPR.
#J-18808-Ljbffr