Information Security Engineer

Information Security Engineer

Gosforth

This role is a key part of Parkdean's Information & Cyber Security structure residing within the Governance, Risk and Compliance Team. This role will work on a breadth of Information Security projects and work streams, but will have a secondary focus on Governance and Compliance. This role will be responsible for owning the compliance and certifications of ISO 27001 and PCI DSS, although this may increase as the organisation grows.

Job Description

• Lead and/or support on Information Security projects and activities ensuring the Information Security Management System (ISMS) is embedded and meets the needs of the business.
• Lead on the compliance programs for ISO 27001 and PCI DSS.
• Lead on maturing and embedding information security policies and procedures in line with the controls defined by ISO 27001 and /or industry best practices.
• Undertake information security tasks and activities to support the business operations
• Lead, support and assist in maturing the Information Governance Framework structure and meetings.
• Support with the response of general advice and guidance requests.
• Design and lead / facilitate / conduct information security audits from both internal and external parties.
• Lead on the Human Risk and Awareness programme.
• Design and lead on risk reduction projects and work stream.
• Support with vendor assessments, contract undertakings and new systems assessments.
• Provide support and cover for security colleagues within the GRC tower.
• Create cross-business relationships and professional networks.
• Support and lead investigation on incidents and/or near misses

Person Specification

• At least five years’ experience working within a cyber and InfoSec function in an omni-channel B2C/customer-centric domain.
• Fully conversant with key security and information standards (ISO27001, Cyber Essentials, PCI-DSS, GDPR).
• Demonstrable experience of delivering Human Behaviour Risk reduction programmes
• Experience of risk management principles and framework creation.
• Excellent communicator, with the ability to communicate technical information to less technical colleagues.
• Strong interpersonal skills and stakeholder management with the ability to influence, advise and consult at all levels.