Ofertas › Clear Business
Clear Business · Sale, United Kingdom · £37,000 - 46,000 per year
Salary: £37,000 - 46,000 per year Requirements: Experience working in information security governance, risk, compliance, audit or assurance environments. Experience supporting security frameworks, standards and certifications such as ISO 27001, Cyber Essentials, PCI DSS, GDPR or other regulated environments. Experience coordinating audits, managing evidence, engaging stakeholders and tracking remediation activities. Experience conducting security risk assessments and maintaining risk or issue registers, with the ability to apply sound risk-based judgement. Strong documentation skills, including producing clear and structured policies, procedures, governance records and audit materials. Ability to build effective working relationships across technical and non-technical teams and communicate security concepts clearly to different audiences. A proactive approach to managing priorities, driving actions to completion and improving governance, assurance and control maturity. Confidence working independently while maintaining accurate governance, risk and audit records, supported by strong Microsoft 365 skills. Responsibilities: Develop, maintain and review information security policies, standards, procedures and governance documentation. Maintain and continually improve the Information Security Management System (ISMS) and governance framework aligned to ISO 27001. Support security certifications, audits and compliance activities by preparing evidence and managing obligations. Identify, assess and report information security risks; maintain risk registers and coordinate mitigation and treatment activities with stakeholders. Coordinate internal and external security audits, managing findings, assurance activities and remediation actions through to completion. Conduct supplier security assurance and due diligence activities, supporting security reviews throughout the supplier lifecycle. Provide governance, risk and control assurance input into technology changes, projects, vulnerability management and emerging technology assessments. Produce security reporting, dashboards and governance updates to support informed decision-making across relevant forums and committees. Keep governance documentation accurate, current, approved and embedded across the business. Support effective audit evidence management, risk reporting, compliance tracking and remediation progress. Technologies: Embedded Support Microsoft 365 Mobile Security Office 365 More: As our IT Security Gove