Security Risk Manager (4-8 yrs)

- Input and support to the Information Security Management System (ISMS) / security team strategy.

- Support in the maintenance of any Security certifications, including ISO27001.

- Support the automation of key Security GRC workstreams / implementation of GRC

- Software and future maintenance and expansion of the software.

- SME on all applicable security legislation and regulatory requirements.

- Facilitation of the security Framework and Governance meetings, up to and including Senior Exec and Board level.

- Drafting and regular updates of the Security documentation set: Security Policies, Standards, Requirements and Guidelines.

- Compilation, delivery and the management of security KPIs, Metrics and other Security GRC reporting.

- Support to the ISO27001 Implementation Programme and then ongoing maintenance of the certification.

- Other Security GRC tasks as directed by security management.