Senior Information Risk Advisor

Description:

Role: Senior Information Risk Advisor
Contract Length: 12 months with possible extension
Location: Hybrid/Edinburgh or Glasgow
IR35: Outside
Pay Rate to Intermediary: £596.10 per day
Security Clearance: Disclosure Scotland

Spinwell is recruiting for a Senior Information Risk Advisor for an excellent opportunity within the public sector.

RESPONSIBILITIES OF THE SENIOR INFORMATION RISK ADVISOR

An experienced Senior Security and Information Risk Advisor (SIRA) is required to provide expertise to teams for risk identification, analysis, evaluation, and treatment and to develop, operate, maintain, and improve the organisation’s ISMS. They shall be responsible for providing technical information security expertise to projects and services to ensure compliance with policies, processes, applicable legislation and regulation, and relative international standards.

The assigned contingent worker will operate as the primary conduit for business teams and functional leads for advice and guidance on all matters relating to Information Security Risk and Assurance. They will combine an expert understanding of information security risk and assurance, with excellent stakeholder engagement and customer focus. This will involve engaging with non-technical and technical stakeholders to communicate the requirements of our information security standards and policies, foster understanding of threats and controls, negotiate improved security outcomes, and conduct assurance activities across products and services both on-premise and in public cloud environments

They will also contribute to the improvement of our policies, processes and controls, to enhance security awareness within the organisation and to providing management reporting.

SKILLS/EXPERIENCE OF THE SENIOR INFORMATION RISK ADVISOR

*

The successful candidate will have a strong understanding and background in technical information security and risk and have the ability to engage with management and technical/non-technical SMEs for the successful implementation and operation of the ISMS and its associated deliverables.

The candidate will have knowledge including (but not limited to):

* Identification, assessment, and management of risk

* Security assurance and the measurement of controls

* Creation of ISMS and IT Security documentation (Policies, Standards, Processes, Procedures and Patterns)

* Internal and Third-Party Audits

* Risk and threat modelling

* Compliance and Assurance Activities

* Business process analysis and mapping (to determine alignment against agreed industry practice and recognised control frameworks)

The candidate will hold the following certifications/qualifications or equivalent:

* Certified Information Systems Security Professional (CISSP)

* Certified ISO 27001 Lead Implementer/Auditor of Management Systems (including Information Security and Business Continuity)

If you are a Senior Information Risk Advisor, apply now or send your CV to Spinwell!

We welcome all applications regardless of background, in line with our commitment to diversity, equality and inclusion.

Applying to this or any other vacancy advertised by Spinwell Ltd constitutes an agreement for Spinwell Ltd to hold your details for 24 months for the purpose of assessing suitability for the advertised position and to make you aware of any other positions deemed suitable of which You will make you aware by means of either email, text or phone. In line with GDPR regulations you are able to request your details be removed from the company data at any time by emailing us