Security Risk Manager

Required The principle responsibilities are: • Input and support to the Information Security Management System (ISMS) / security team strategy.• Support in the maintenance of any Security certifications, including ISO27001.• Support the automation of key Security GRC workstreams / implementation of GRC Software and future maintenance and expansion of the software.• SME on all applicable security legislation and regulatory requirements.• Facilitation of the security Framework and Governance meetings, up to and including Senior Exec and Board level.• Drafting and regular updates of the Security documentation set: Security Policies, Standards, Requirements and Guidelines.• Compilation, delivery and the management of security KPIs, Metrics and other Security GRC reporting.• Support to the ISO27001 Implementation Programme and then ongoing maintenance of the certification.• Other Security GRC tasks as directed by security management.