Oliver James have been mandated by their global professional services client to assist in finding a Information & Cyber Security Risk Manager. This is a key role within their robust internal services (non-consulting / non-client facing) operational function and can be based anywhere in the UK (hybrid / remote). Basic salaries may range between £70,000 - £80,000 plus car, benefits, pension and bonuses.
Oliver James have been mandated by their global professional services client to assist in finding a Information & Cyber Security Risk Manager. This is a key role within their robust internal services (non-consulting / non-client facing) operational function and can be based anywhere in the UK via a remote or hybrid working arrangement. Basic salaries may range between £70,000 - £80,000 plus car, benefits, pension and bonuses.
The Information Security & Cyber Risk Manager reports into the Information Risk Lead and forms part of the Information Security Team. The Information Security Risk Manager is responsible for managing second line of defence information risk and reporting for the UK firm, including providing the status of the information risk position across the firm.
ROLE RESPONSIBILITIES
The Information Security Risk Manager is responsible for:
- Managing the firm's Information Risk Management framework, including the management of related risk lifecycle processes and artefacts
- Driving information risk continuous improvement based on changes in requirements (e.g. ISO 27001, FRC requirements)
- Monitoring, tracking and reporting information security risks captured within Information Assurance and escalating any exceptions
- Managing the enterprise risk reporting for Information Assurance
- Ensuring that reporting generated from the Information Risk Management framework is delivered to relevant stakeholders (e.g. Capability Risk Partners) to facilitate effective decision making
- Ensuring that all information risk core documentation is managed and regularly reviewed in line with KPMG policies
- Providing advice, challenge and support in relation to embedding the appropriate risk culture across the first line of defence, including early identification, and mitigation of information risk
- Supporting the CISO and Head of Information Assurance in making the Information Assurance risk governance bodies effective
KNOWLEDGE, SKILLS AND QUALIFICATIONS
- Experience leading and assisting audits
- CRISC or CISM certifications are desirable
- Ability to understand business drivers and risk appetite and to make clear recommendations
- Experience of leading projects
- Excellent attention to detail, combined with strategic vision
- Ability to prioritize and manage a complex workload
- A proven ability to influence others and communicate effectively with stakeholders at all levels
- Strong integrity, independence and resilience
