You help us and our clients manage security risk, policy and data protection requirements.
Key Responsibilities
- Maintain security policies, risk registers and control evidence
- Support GDPR and data protection assessments
- Help prepare for ISO 27001-style audits and customer security reviews
- Run security awareness and access review activities
- Track actions and report on risk to management
Required Skills
- Understanding of information security and data protection principles, including GDPR
- Experience with risk assessment or audit support
- Organised, detail-focused and good with documentation
- Clear communication with technical and non-technical colleagues
Nice to Have
- Knowledge of ISO 27001 or similar frameworks
- A relevant GRC or privacy certification
Tools and technologies: Risk registers; Policy and evidence management; GDPR assessments; ISO 27001 concepts
How to prepare
- Be ready to describe how you would run a simple risk assessment
- Revise the GDPR principles and what evidence an auditor asks for