Information Security Consultant – Outsource contracts review

Information Security Consultant required for marking leading financial services firm. The role will be centred around reviewing and understanding contracts for a major security outsource provider. This position is not doing due diligence reviews, but a contractual ‘what good looks like’ review.

Responsibilities:

• Review and understand contracts & SLAs between firm and outsourced security provider
• Identify and map what services the outsource provider is responsible for
• Identify ‘quick wins’ i.e., what can the outsource provider cover and what can/needs to be acquired elsewhere
• Conduct gap analysis for industry best practice against outsourced contract
• Based on the contractual reviews, make recommendations to streamline current service
• Engage in contract renegotiations

 

As an ideal candidate, you will have an industry certification such as CISSP/CISM/CRISC and have expert knowledge of Information security outsourced contracts. You will also have a proven track record in large-scale contractual renegotiations. Experience in financial services is highly advantageous.