Information Security Consultant

Information Security Consultant required for a market leading energy provider. The role will be centred on strengthening their control environment and enhancement of control capability.

Responsibilities:

• Formulate strategy to increase robustness of control environment.
• Lead the creation of control catalogue.
• Perform gap analysis of current controls and recommended remediation.
• Control testing and optimisation
• Ensure adherence to frameworks such as NIST, COBIT and ISO27001.
• Oversee ITGC implementations
• Track, update and manage outstanding Risk Acceptances and mitigating controls therein.
• Track live risk and audit items and actions, including chasing action updates.
• Be a conduit for all audit activities which impact the IT department, this includes any follow-on actions.
• Identify, plan, manage and drive opportunities for improving efficiency and effectiveness cross functionally, through the Continuous Improvement Plans to help mitigate risks.
• Organize and support continuous improvement activities to improve team skills and enhance knowledge development of risk management within IT.  Act as “go to” management support for risk management activities and initiatives, general process knowledge and strategies for employees at all levels.

As an ideal candidate, you will have an industry certification such as CISA or CRISC and have expert knowledge of OT governance, Controls, COBIT and COSO frameworks.  You will also have a proven track record of delivery in a similar role and have strong stakeholder management.