Information Security Compliance Officer
About Us
We’re an award-winning innovative tech consultancy - a team of creative problem solvers. Since 1993 we’ve been finding better, more sustainable ways to solve complex technology problems for some of the world’s leading organisations and delivered solutions that millions of people use every day.
In the last 30 years we won several awards, including a prestigious Queen’s Award for Enterprise in the Innovation category for our Enterprise Agile delivery approach.
Operating from 26 locations across the world, we bring together teams of creative experts with diverse backgrounds and experiences, who enjoy working and learning in our collaborative and open culture and are committed to world-class delivery.
We want to continue to grow our team with people just like you!
About the Role
We are expanding our Information Security offer and have exciting opportunities for all Information Security & Compliance experts to come and join the UK’s leading independent IT consultancy.
This is an exciting time to join the security team as we are currently at the start of delivering a new security roadmap. Which will allow you to be involved with the implementation and management of various security and compliance practices. This role would suit an experienced candidate in a similar, Information Security, Governance and Compliance focused role.
Some of the Responsibilities include:
- Management, implementation and maintenance of security, governance and compliance standards including ISO 27001 and Cyber Essentials Plus
- Completing and management of security documentation including RFI, customer due diligence and ad-hoc requests
- Creating, maintaining, communicating, and enforcing information security policies, standards, processes, procedures, guidelines and practices
- Supporting of security day to day activities including, awareness, training, advice and support
- Manage, maintain and monitor the global Information Security Management System
- Preparing and reporting dashboards and presentations based on security data, including KPI and ISMS management
Experience Required for the role:
- Experience in managing a global Information Security Management System
- Deep Knowledge and experience of implementing and managing the ISO 27001 framework
- Excellent data gathering, reporting and problem-solving skills
- Verbal and written communication skills
- Proven experience with completing security documentation
- Strong experience in creating and maintaining policies, standards, processes and procedures
- Promoting and championing information security governance and compliance throughout various business sectors
About You
ISO 27001 and ISMS management is a major part of this role, the ideal candidate will need to demonstrate the relevant practical experience of implementing and managing an Information Security Management System.
Requirements for the role:
- BSc degree, or relevant industry experience
- ISO 27001 Lead Implementer/ISO 27001 Internal Auditor qualifications
- Broad knowledge required of information security, compliance and governance practices
- Internal audit experience including development of audit plans, documentation, reporting, escalation and follow up of remediation actions
- Experience in completing customer security due diligence documentation
- Ability to provide subject matter support and advice via support tickets and ad-hoc requests
- Must be a friendly individual who is able to form and maintain relationships across various business sectors
- Ability to work within a team and as an individual
- experience including development of audit plans, documentation, reporting, escalation and follow up of remediation actions
- Experience in completing customer security due diligence documentation
- Ability to provide subject matter support and advice via support tickets and ad-hoc requests
- Must be a friendly individual who is able to form and maintain relationships across various business sectors
- Ability to work within a team and as an individual
About the Team
Our Information Security function is maintained by our Head of Information Security, who is currently overseeing all departmental tasks. The newly formed Information Security team will report directly to the Head of Information Security to implement and support our newly created strategic vision. Joining the team will provide you with an opportunity to manage, support and apply your information security, compliance and governance expertise across the business.
Some of the Perks
- Flexible benefits allowance – you choose how to spend your allowance (additional pension contributions, healthcare, dental and more)
- Industry leading health and wellbeing plan - we partner with several wellbeing support functions to cater to each individual's need, including 24/7 GP services, mental health support, and other
- Life Assurance (4 x annual salary)
- 25 days annual leave plus bank holidays
- Hybrid working - Our roles are not fully remote as we take pride in the tight knit communities we have created at our local offices. But we offer plenty of flexibility and you can split your time between the office, client site and WFH
- Discounts – we have preferred rates from dozens of retail, lifestyle, and utility brands
- An industry-leading referral scheme with no limits on the number of referrals
- Flexible holiday buy/sell option
- Electric vehicle scheme
- Training opportunities and incentives – we support professional certifications across engineering and non-engineering roles, including unlimited access to O’Reilly
- Giving back – the ability to get involved nationally and regionally with partnerships to get people from diverse backgrounds into tech
- You will become part of a squad with people from different areas within the business who will help you grow at BJSS
- We have a busy social calendar that you can chose to join– quarterly town halls/squad nights out/weekends away with families included/office get togethers
- GymFlex gym membership programme