Related tasks:

• Responsible for the implementation of the information security programme and risk management framework to ensure that information assets across the organisation are used, managed and protected in accordance with applicable legislative and regulatory requirements.
• Responsible for the creation and implementation of the group Roadmaps to address gaps resulting from all current state assessments to support improved security maturity.
• Collaborate with the Group CTO in the development and implementation of appropriate information security and privacy policies, processes and other resources, ensure all resources meet applicable legislative and regulatory requirements.
• Responsible for raising awareness across the group of the importance of information security through the creation and delivery of appropriate training and other awareness initiatives, to ensure the proper implementation of and adherence to the organisations strategy and policies, both by staff and relevant third parties.

• Strong working knowledge of information security standards.
• Very Strong Experience of Infosec consultancy within a commercial environment.
• In-depth knowledge of global technological trends and developments in information security and risk management.
• In-depth knowledge of privacy laws and standards, though this is less essential.
• In-depth knowledge of PCI DSS (desirable but by no means essential) Professional certification such as CISSP, CISM, CISA or other Infosec credentials.
• Desirable technical skills Understanding of security tools - IDS/IPS, patching, vulnerability management, SIEM, penetration test and remediation.
• Self-starter approach and the ability to work on own initiative who gains satisfaction from providing excellent service.
• Strong influencing and stakeholder management skills able to build relationships at all levels.