Job Description: Information Security & Risk Officer

Overview

This Information Security & Risk Officer role is for the end client. We are seeking a dedicated and experienced professional to join the team and play a critical part in safeguarding the organization's information assets by managing risks, ensuring compliance with security standards, and promoting a culture of security awareness. We value diversity, equity, and inclusion and encourage candidates from all backgrounds and experiences to apply.

Responsibilities

• Develop, implement, and maintain the Information Security Management System (ISMS) in accordance with ISO 27001 standards.
• Conduct comprehensive risk assessments and threat analysis to identify vulnerabilities and recommend mitigation strategies.
• Manage Security Governance, Risk, and Compliance (GRC) frameworks to ensure organizational adherence to regulatory requirements and internal policies.
• Collaborate with stakeholders across departments to facilitate effective security practices and promote awareness.
• Lead initiatives to raise security awareness among employees and foster a security-conscious culture.
• Monitor and report on security incidents, risks, and compliance status to senior management.
• Support audit processes and contribute to continuous improvement of security policies and procedures.
• Stay current with emerging security trends, technologies, and regulatory changes.

Qualifications

• Proven experience in Information Security Risk Management, particularly with ISO 27001 and ISMS.
• Strong expertise in risk assessments, threat analysis, and security governance frameworks.
• Familiarity with Security Governance, Risk & Compliance (GRC) tools and best practices.
• Excellent stakeholder management and communication skills, with the ability to engage and influence across all organizational levels.
• Certification such as CISSP, CISM, or ISO 27001 Lead Implementer/Auditor is highly desirable.
• Commitment to upholding diversity, equity, and inclusion principles within the workplace.
• Analytical mindset with strong problem-solving abilities.

Day-to-Day

• Conduct ongoing risk assessments and update risk registers to reflect current threat landscape.
• Collaborate with business units to integrate security requirements into projects and operations.
• Organize and deliver security awareness training sessions and campaigns.
• Review and update security policies and procedures as needed.
• Attend meetings with stakeholders to discuss security metrics, compliance status, and emerging risks.
• Respond promptly to security incidents and coordinate resolution activities.
• Participate in internal and external audits related to information security compliance.
• Continuously monitor security tools and systems to detect potential vulnerabilities.

We are committed to building an inclusive workplace where all employees feel valued and respected. If you are passionate about protecting information assets and driving risk management excellence within a diverse environment, we encourage you to apply.

Amoria Bond operates as an employment Business and agency. No terminology in this advert is intended to discriminate on the grounds of age or experience, and we confirm that we are happy to accept applications from persons of any age or experience for this role.