Information Security, Governance, Risk & Compliance Officer

Information Security Governance Risk and Compliance Officer

35,000pa

Hybrid/Kings Hill, Kent

Do you have proven experience of Information Security Risk Management? Do you consider yourself to be self–motivated and have a keen eye for detail?

Commercial Services Group are currently recruiting for strong communicator with proven experience of security policy development and process management to join their team.

The Information Security, Governance Risk & Compliance Officer is responsible for supporting our Governance and Security teams in establishing and maintaining a Group–wide information risk management programme to ensure that information assets are adequately protected. This individual will be responsible for identifying, evaluating, and reporting on Information Security risks in a manner that meets compliance and regulatory requirements, and aligns with and supports the risk posture of CSG Group.

In return we will offer you –

• 25 days holiday, plus bank holidays
• Never work a birthday again! You receive an extra day off for it to enjoy however you wish!
• Generous discount scheme, including gym and retail.
• Life assurance cover
• Health cash plan initiative
• A culture of progression and development
• Plus many more perks

Key duties –

• Developing and driving a comprehensive risk management programme that includes ongoing information system risk assessments for both existing and newly integrated systems
• Working with the Governance and Security teams to develop and coordinate Group–wide Information Security risk assessments, controls, policies, standards, processes, and guidelines.
• Ensuring consistent compliance with legislation, regulations, and certification requirements
• Regularly conducting audits to maintain and enhance security practices to ensure they are compliant and meet the high standards of our organisation
• Reporting risk management issues and internal control deficiencies identified directly to governance groups and supporting the Governance and Security teams in providing recommendations for enhancing our Information Security and risk management strategies

What we need from you –

• A genuine passion for Information and Cyber Security
• A mindset that is strongly orientated towards security risk management and compliance
• Security Certifications (ISO27001, CISM etc.) are desirable but not essential
• Knowledge of Information Security Principles, Standards and Frameworks
• Knowledge of legislative and regulatory requirements relating to Information Security and Data Protection
• Proven experience of security policy development and process management

About Commercial Services Group

Commercial Services Group (CSG) is one of the largest providers of public sector and education procurement and support services globally, with revenues of c 600M, 1,800 staff across 25 trading brands, providing services ranging from: HR Services, IT Services, Energy, Education Resources, Procurement and many more.

Wholly owned by Kent County Council, CSG supports over 15,000 customers in 86 countries and collaborates with a supply chain of c1,000 suppliers.