Information Security Risk & Compliance Officer at Save the Children

Role Purpose:

The Information Security Risk and Compliance Officer will play a key role in ensuring SCI addresses information and cyber security risks in a timely and effective manner.

Reporting directly to the Director of Information Security and Data Protection, the Information Security Risk and Compliance Officer will work closely with colleagues in the cybersecurity operations and information assurance teams as well as teams across IT and the wider organisation to support risk and compliance activities.

The Information Security Risk and Compliance Officer will be responsible for keeping the IT Risk Register up to date and coordinate risk mitigation actions. The role is also responsible for the coordination of all information security compliance activities including Cyber Essentials, ISO27000 and NIST CSF.

EXPERIENCE AND SKILLS

Essential

• Minimum of three years’ experience working in an information security function or related GRC role
• Strong knowledge of information security / cybersecurity management principles
• Working knowledge of at least one globally recognized information security framework such as ISO27000, NIST CSF or Cyber Essentials
• Experience of conducting information security risk assessments or reviews
• Demonstrable experience of advising stakeholders in relation to risk remediation
• Good knowledge of commonly applied technical and organizational information security controls
• Ability to work with a range of business stakeholders to understand and articulate their activities in line with defined standards
• Good verbal and written communication skills
• Self-motivated, with a proactive and collaborative approach, and a strong results orientation
• A commitment to the mission, vision and values of Save the Children

Desirable

• Knowledge of different information risk assessment methodologies (both qualitative and quantitative)
• Good understanding of Enterprise IT including cloud computing technologies (SaaS/PaaS/IaaS)
• Experience of working with Business Analysts, Project Managers, Change Managers and Project Management Offices