Position Overview & Specifications
IT Security Compliance Officer
London
12-Month FTC
£50,000 - £60,000 + Excellent Benefits
Digital Waffle is working in partnership with a provider of software development, data analysis, and marketing. This is a fantastic opportunity for an enthusiastic IT Security and Compliance Officer.
Job Role
The role of the IT Security and Compliance Officer is to Perform an evaluation of Third Party and Vendor engagements to identify and manage vendor risk which may include the completion of risk assessments as well as conducting technical security reviews of our suppliers and partners.
Requirements What do you need?
Job details
Posted 25 January 2023 Salary £50000 - £60000 per annum LocationLondon Job type Permanent DisciplineInfrastructure ReferenceML-64-6 Contact NameMorgan LingardJob description
IT Security and Compliance OfficerLondon
12-Month FTC
£50,000 - £60,000 + Excellent Benefits
Digital Waffle is working in partnership with a provider of software development, data analysis, and marketing. This is a fantastic opportunity for an enthusiastic IT Security and Compliance Officer.
Job Role
The role of the IT Security and Compliance Officer is to Perform an evaluation of Third Party and Vendor engagements to identify and manage vendor risk which may include the completion of risk assessments as well as conducting technical security reviews of our suppliers and partners.
- Evaluate third-party risk and steer vendor relationships Evaluates vendor responses to security questionnaires Make recommendations on ways to mitigate vendor risk
- Maintain vendor risk repository of artifacts including regular third-party vendor certifications and assign risk scores to firm suppliers and partners.
- Conduct on-site audits of high-risk vendors reviewing security and controls
Requirements What do you need?
- Confident to make independent decisions.
- Possess a sufficient understanding of technical concepts including systems, networks, and security architecture best practices in order to effectively evaluate risk and assess the effectiveness of controls.
- Strong and deep information security risk identification (includes Cloud services), assessment, and risk ranking experience.
- Ability to convey technical concepts in layman's terms.
- Ability to interact effectively with, and influence, external vendors.
- Keen attention to detail and accuracy in order to analyze documents.
- Broad knowledge of risk management, vulnerability management, and third-party risk.