Senior Information Security Risk Analyst (3701)

at  GBG

REQUIREMENTS

• An Individual with a passion for risk management, who can translate risk to all levels of the organisation.
• Able to converse at all levels to achieve the aim of managing risk within GBG
• A team player who works well with others, who also can work well on their own
• Business risk management experience
• Risk management experience within an information security role
• Experienced with the following standards/frameworks: ISO27001. ISO22301, ISO31000, Cyber Essentials+, NIST, PCI/DSS
• Experience of using; Microsoft Lists, Jira, Power BI
• Qualified to or working towards Certified Risk Information Security Controls (CRISC)
• Qualified to Certified Information Security Management Principles (CISMP)

THE ROLE

Support of GBG’s Information Security Risk programme, making sure It Is implemented properly with minimal risk to GBG, our customers and stakeholders.

WHAT YOU WILL DO

• Support the delivery of the GBG information security strategy including advanced and technical projects globally
• Support with raising awareness of risk identification and management within the business to align to ‘think risk first’
• Manage and maintain the information security risk register to ensure risks are managed in line with policy
• Create, manage and analyse risk management information to ensure risks are understood within the business and managed in line with expectations
• Engage with leaders within the business to manage risks in line with policy
• Develop information security risk education and awareness training within the organisation
• Conduct risk assessments of new projects
• Conduct supplier risk management activities including contract reviews
• Create, manage and maintain the Operation Resilience and Redundancy programme
• Create, manage and analyse operational resilience and redundancy information to ensure outcomes are captured and reported In line with policy
• Plan annual testing of operational resilience and support the business functions to deliver in line with expectations
• Lead and conduct annual business impact analysis activity
• Support customer and supplier requests for information security risk and operational resilience information, these could be in the form of audits or questionnaires