Information Security & Assurance Manager

at  LSL Property Services

Job Locations: UK-Newcastle Upon Tyne Job Profile:
LSL are one of the largest providers of services to mortgage intermediaries and franchised estate agencies and provide valuation services to many of the UK’s largest mortgage lenders.
We are currenty looking for an expereined Information Security & Assurance Manager to join our Franchising division in Newcastle upon Tyne and contribute to ensuring the security and privacy of our franchise operations.
As the Information Security Risk and Assurance Manager, you will serve as an independent control function overseeing risk and monitoring the first-line-of-defence control framework within the Franchising Division. Your role involves providing challenge on the effectiveness of controls, advising IT departments’ business leads, participating in multiple Risk and Information Security Steering Groups, and supporting the delivery of an effective information security and governance framework.

MAIN ACCOUNTABILITIES & KEY OBJECTIVES:

• Support the development, production, and management of an Information Security and Data Protection Risk framework.
• Increase awareness of Information Security and Data Privacy throughout the business, assisting in achieving compliance targets.
• Provide targeted assurance reviews to assess the suitability of the control framework within the first-line-of-defence.
• Aid in the creation, distribution, and compliance of business Information Security and Data Privacy policies.

KNOWLEDGE AND EXPERTISE:

• Familiarity with security policies, standards, and risk frameworks.
• Awareness of industry best practices.
• Experience in assurance and relationship management.
• Commercial acumen and report writing skills.
• Analytical, decision-making, and problem-solving skills.

EXPERIENCE, QUALIFICATIONS, AND REQUIREMENTS:

• Certification in CISA, ISO 27001, CISSP, CCSP, CSTAR, CISM, or PCI DSS (Desirable).
• Understanding of PCI DSS, Cyber Essentials, and the Data Protection Act.
• Knowledge of Dev Ops and Dev Sec Ops.
• Leadership skills and experience influencing senior management.
• Experience assessing third-party infrastructure.
• Excellent communication and influencing skills at all levels.
• Awareness of relevant legislation and regulations.