Junior Information Security Officer

Experian

full-time entry London, United Kingdom · More jobs in London, England, United Kingdom

This position is sourced from Experian's career page . Apply through Job-Scouts to track your application status.

Job Description

Job description

We are looking for someone with a passion for Information Security. This entry-level role offers the opportunity to gain hands-on experience across security governance, risk management, compliance, audit, and vulnerability management within a global organisation.

The Junior Information Security Officer will support the Information Security Manager in delivering security assurance activities across Experian Data Quality (EDQ). You will help ensure compliance with ISO 27001, SOC 2, Experian security standards, and regulatory requirements while supporting the continuous improvement of EDQ's security and compliance posture.

You will work with colleagues, customers, auditors, and partners across multiple regions, with occasional travel to regional EDQ offices to support ISO 27001 certification and audits.

Responsibilities

Reporting into the Security Manager, you will support with:

Security Governance, Risk & Compliance

• Support the maintenance and improvement of the Information Security Management System (ISMS).
• Work with Experian Global Security partners to monitor and support compliance with Experian Global Policies, security standards, and applicable regulatory requirements.
• Identify internal and external issues that may impact Information Security.
• Attend and contribute to Information Security and ISMS governance meetings.
Audit & Assurance

• Help with ISMS internal audits and supporting Global Internal Audit activities.
• Support ISO 27001 certification activities across multiple regions.
• Help with SOC 2 attestation activities for EDQ's flagship application.
• Support customer, regulatory, and third-party audits.
• Track audit findings and supporting the completion of agreed remediation actions.
Vulnerability & Security Monitoring

• Monitor, and reporting on technology vulnerabilities and remediation activities.
• Analyse security incidents, events, and trends to identify areas for improvement.
• Help maintain security metrics, reporting, and risk tracking.
Security Support & Engagement

• Support Project Managers and Scrum Masters through the Project Security Assessment (PSA) process by providing guidance, documentation, and assistance.
• Raise awareness of important information security risks, projects, and best practices across the business.
• Coordinate customer security and compliance enquiries with the appropriate partners.