Information Assurance Specialist

Leatherhead / Epsom + remote hybrid

Salary £40,000 to £55,000 per annum + Bonus and Benefits

This role requires UK Secret Level Security Clearance, to achieve this you must be a current UK Passport Holder.

The Information Assurance role plays a key part in the implementation of theInformation Security Management System and is crucial to its improvement and the development of the security culture.
You will help to ensure the companies information assurance obligations, associated risks and opportunities are understood, and you will establish how effectively the security controls are operating - identifying and instigating value-adding improvements, as appropriate.

Engaging with a range of internal stakeholders across the business; the Information Assurance Specialost is a trusted advisor on all matters relating to an established ISMS.

* Good knowledge of information security management practice and systems, supported by appropriate education and qualification, e.g., Certificate in an Information Security Management related subject or degree level, or working towards it
* Experience of internal Information Assurance audit processes
* Working towards, or membership of, a relevant professional institute, e.g. The Security Institute, or The Chartered Institute of Information Security
* Good working knowledge of ISO 27001 (Information Security Management Systems) and associated documentation
* Planning and managing tasks to meet requirements and deadlines
* Technical, engineering, or professional services background preferred
* Familiarity with Microsoft Office 365, including Teams and Sharepoint would be an advantage
* Experience of working in the Defence or Civil Nuclear security sectors would be advantageous along with familiarity with Government Functional Standard GovS 007: Security

Role Overview:

* Supports the implementation of the ISMS, as required, including: the preparation, control & management of documented procedures and associated communications; the development & use of internal tools as necessary; development and delivery of awareness training and records management to ensure compliance with legal, regulatory or client obligations.

* Support the Information Security Manager and the Cyber Risk & Assurance Manager in determining and defining information security risks and mitigating control requirements.

* Works closely with key stakeholders to support the delivery of information assurance plans, including the implementation of process requirements, and liaises with other business functions, as necessary, to promote information security requirements, as well as good practice.

* Assists with the planning, coordination, and execution of internal audits of the ISMS, including the identification of non-compliances, corrective action monitoring and reporting.

* Analyses audit results, security incidents and events and other feedback, to identify opportunities for improvement and proposes solutions to address them; provides reports and support with associated communications as may be required.

* Supports external audits, inspections, or investigations, as required, to meet the requirements of our clients, their agents, certification bodies or regulators etc.

* Assists project and business managers with requests for advice on information security practice, guidance and support to prequalification submissions, bids for new work, and on procedural matters and supplier assessments.

* Works with colleagues in the Business Assurance team to support activities across other management systems, as may be required from time-to-time.

* Engages with colleagues from other businesses or operations within the KBR family, as appropriate, to support the corporate needs of the parent organisation.

• Flexible working
• Flexible start and finish time
• 25 days' holiday entitlement
• Holiday sale and purchase scheme
• Company pension scheme
• Targeted professional development
• Life assurance
• Private healthcare membership
• Bonus scheme linked into company performance
• Paid membership fees to a professional institution
• Support in attaining professional membership
• Cycle to work scheme
• Season rail ticket loan

Services advertised by Gold Group are those of an Agency and/or an Employment Business.
We will contact you within the next 14 days if you are selected for interview. For a copy of our privacy policy please visit our website.