Compliance & Information Security Consultant

Role Overview

Primary Responsibilities:

We are seeking an Information Security Consultant to help drive our GRC Team’s service offering. The ideal candidate will have experience working as a ISO 27001 implementor and/or auditor and familiarity with other industry standards such as NIST and HMG standards such as CAF

The candidate will be assisting in supporting the operation, maintenance and maturity of the Information Security program for both DXR Cyber and our external clients.

Duties and responsibilities will include:

• Ensuring the protection of information assets and technologies
• Contribution to completion of security related audits such as ISO 27001, ISO 27701, ISO 9001, NIST-CSF, IASME Governance
• Conduct and document internal audits for both DXR Cyber and our clients
• Hands-on experience in implementing and auditing ISO frameworks is required
• Experience delivering security awareness training or and be comfortable with public speaking
• The ability to develop and leverage strong relationships with internal and external stakeholders.
• Manage Third Party Risk Management (TPRM) including vendor security programme reviews,
• Help the Sales Team with scoping engagements and delivering a valued service to our customers
• An understanding of the requirements of business continuity and disaster recovery solutions

You will need:

• Extensive Information Security Governance, Risk and Compliance (GRC) experience as well as InfoSec Operations experience
• Experience contributing to a Business Management System (BMS) certified to ISO standards
• Good knowledge of the Cyber Essentials Plus Scheme as well as UK & EU General Data Protection Regulation (GDPR) and the Data Protection Act (2018)
• The ability to work autonomously and as part of a team, excellent communication skills

Certifications preferred:

• ISO 27001 Lead Implementer
• ISO 27001 Internal Auditor
• ISO 9001 Implementor
• ISO 9001 Lead Auditor
• CISM/CISSP:

Skills Required:

• Skilled in time, priority and task management
• Interpersonal skills to interact with customers and team members
• Ability to anticipate problems, resolve ambiguity and take decisive action
• Eligibility for Security Clearance
• UK Driving Licence
• Hybrid working with a requirement to work from our Head Office (Doncaster once or twice a month, dependent on location)

This is an excellent opportunity within a stable organisation dedicated to Cyber Security.

Benefits

• Salary Sacrifice pension scheme
• Private Medical Insurance
• Buy/sell holiday scheme
• Birthday leave paid
• 33 days holiday Inc bank holidays
• Cycle-to-work scheme
• Employee Assistance Programme
• Government Childcare Scheme