Information Security and Risk Manager

The Information Security & Risk Manager will serve as the primary point of contact between the function and their assigned Banner/Group Functions. The role is responsible for maintaining a strategic relationship with the specific Banner / Group Function that they are aligned to, ensuring cybersecurity is incorporated into the local culture.

Client Details

The company is an international home improvement company with over 1,400 stores, supported by a team of over 80,000 colleagues.

Description

• Work within the Information Security & Risk team
• Provide a consultancy service to Banner / Group Function ensuring there is the correct balance between business operations and security
• Develop and own strong relationships with Banner / Group Function to enable the delivery of effective consultancy and be a trusted advisor.
• Develop an understanding of business goals and reframe risk discussions in business terms
• Educate stakeholders on cybersecurity-related matters in an effort to increase awareness and improve culture
• Identify opportunities to improve and increase the services to the Banner/Group Function.
• Own the Banner portfolio of security activity
• Develop and maintain a detailed risk and threat landscape for the Banner / Group Function
• Establish risk ownership and accountability within the Banner Group Function
• Support the Banner / Group Function in risk decision making and prioritisation of activities
• Analyse security risks and their impact on the operating environment, recommending practical solutions that will support the Banner needs.
• Ensure all solutions are delivered 'Secure by Design'
• Perform supplier assurance reviews in support of legal and commercial activities including the negotiation of security clauses.
• Be part of the Security Incident Response Team (SIRT) providing expertise and making decisions on the appropriate response to a security breach.

• Provide detailed and accurate reports to support the findings of all reviews and activities

Profile

• Proven professional experience in information security management principles
• Breadth and depth of knowledge of standards such as ISO 27001, NIST, OWASP
• An ability to communicate complex and technical issues to diverse audiences, orally and in writing, in an easily understood, authoritative, and actionable manner
• Strong understanding of the business relevance of information security risks and the current trends and developments in information security
• Excellent written and verbal communication skills
• A demonstrated ability to use positive influencing skills effectively to modify their opinions, plans, or behaviours
• An understanding of business needs and commitment to delivering high-quality, prompt, and efficient service to the business
• An understanding of organizational mission, values, and goals and consistent application of this knowledge
• Strong decision-making capabilities, with a proven ability to weigh the relative costs and benefits of potential actions and identify the most appropriate one
• Strong organization, prioritization, and rationalization skills
• Has the accessibility and ability to interface with, and gain the respect of, stakeholders at all levels and roles in the company
• Is a confident, energetic self-starter, with strong interpersonal skills
• Has good judgment, a sense of urgency and has demonstrated commitment to high standards of ethics, regulatory compliance, customer service and business integrity
• Strong problem-solving and trouble-shooting skills

Job Offer

• Contract of employment
• Benefit system
• Hybrid type of work
• Flexible hours