Accreditation Security Professional

Accreditation Security Professional

Gloucestershire

Contract

650 - 780 per day Inside IR35

We're currently seeking a ambitious Accreditation Security Professional to work with our exceptional client in a secure environment.

This contract role requires active SC clearance.

The Accreditation Security Professional must have demonstrable experience working in situations with reasonably complicated risk management scope.

Responsibilities:

• Making and recording accreditation decisions, confirming that the residual risks on behalf of their organisation(s) are within the risk appetite(s) as recorded in relevant framework documentation escalating as appropriate.
• Identifying Information Risks that have implications beyond the framework and communicating them to the relevant framework(s).
• Ensuring that relevant standards and policies are appropriately applied.
• Ensuring that all Information Risk Management Artefacts that are the responsibility of the Accreditor are established, proactively monitored, and kept up to date.
• Establishing the Framework risk assessment and agreeing the controls that will cover physical, personnel, procedural and technical domains.
• Building open and honest collaborative relationships with Framework owners, using narratives to influence behaviours and actions, to meet the organisations security requirements.
• Providing constructive and timely advice on Information Risk mitigation strategies and their implications.
• Providing updates on and relaying key issues pertaining to Framework(s) in team meetings and Framework reviews.
• Proactively collaborating and sharing knowledge with other IA professionals.
• Ensuring that technical and business skills remain current.
• Being able to justify their accreditation decisions to stakeholders in terms of business objectives, threats, risks, vulnerabilities, controls, and business impacts.
• Providing constructive, pragmatic, and timely advice to others on whether proposed solutions are likely to result in significant risks that may go beyond the risk appetite of the business.
• Continually assessing the health and operation of a framework.
• Provide a comprehensive knowledge transfer on completion of individual tasking to an identified point of contact.

Skills required:

• An expert in Risk Management,
• Able to build relationships with stakeholders at varying seniority levels
• Possess excellent communication skills
• An ability to clearly understand the impacts of risk from a Security and Legal perspective
• Actively keep up to date with industry relevant skills and advancements
• Possess an array of technological skills and awareness
• Eliciting information to fully understand requirements
• Able to work independently
• Consultative by nature
• Take initiative in problem solving and related tasks