Qualifications:

• Qualified to degree level, preferably in a business, IT or security related subject.
• Be interested in developing skills and knowledge in information security, and willing to work towards appropriate professional qualifications, such as CISM, CISSP, CISA, CRISC, ISO27001 Lead Auditor.
• Formal training in security, risk management or compliance is beneficial.
• Whilst this is not a hands-on technical role, the role holder will be expected to demonstrate a strong awareness of technology and how IT is used to enable business processes.
• Strong knowledge of using Microsoft Office Suite, Power BI, and SharePoint.

Skills

• Strong IT and analytical skills
• Proactive rather than reactive
• Team player with good interpersonal skills
• Ability to work under pressure to tight timelines
• Organized and methodical
• Willing to challenge and desire to learn
• Good communication skills, both orally and in writing

Knowledge/Experience:

Essential

• Knowledge and understanding of security and IT concepts
• Experience of working in an analytical role, with an ability to interpret data, prepare reports and undertake business support activities.
• Experience working as part of a business support function such as risk, compliance or information security in a large enterprise.
• Experience in a business-facing (rather than purely IT) role

Beneficial

• Existing Information Security experience of around 5 – 7 years
• Data Analytics and Reporting Experience.
• Demonstrable knowledge of security risk management tools, methodologies, and practices
• Knowledge of security standards, frameworks, regulation, and legislation
• Experience of managing own workload and delivering to tight timescales.

Other relevant experience, e.g., IT audit / information assurance Experience of working in a regulated environment, not necessarily insurance or financial services.

Bachelors degree