Information Security Specialist Lead
Prefer a full account with a password? Sign Up to Apply
Job Description
Job Description
Reporting to the Head of Information Security Policy and Standards, you will lead the identification, documentation, and implementation of the security risk and controls framework across the Enterprise to meet Experian's cybersecurity and risk requirements.
The Information Security Specialist Lead will contribute to the team's goals of ensuring a sound security posture by designing and implementing risk-based security controls.
You will contribute to the design and operation of best-practice cyber risk management, collaborating with partners across the business.
Responsibilities:
• Lead the security risk and control modularisation strategy, engaging with the Regional BU, centralised security and IT control owners across the Enterprise to populate the controls library.
• Maintain and update the integrated risk and control framework following information security policies, standards, industry-accepted practice, and regulations.
• Review and provide expert check and challenge on first-line business units defined control activities, ensuring agreement on the requirements outlined in control standards and goals.
• Identify, document, and report control activity gaps, and provide remediation recommendations.
• Compile management reports, summary analysis, and detailed presentations to describe the risk and controls program.
• Develop and present content for controls implementation workshops with control owners across the Enterprise.
• Ensure information security controls are aligned and mapped to applicable risks (risk types and risk register entries) in the Archer GRC platform.
• Monitor and stay informed about internal and external risk indicators that could affect and disrupt Experian and our mission. Provide these risk indicators as inputs to control assurance and other EGSO activities.
• Contribute to the efficiency of the risk and controls program by standardizing and automating processes, capturing stakeholder feedback to drive improvement, and enhancing the engagement model.
• Support strategic projects representing the Information Security Governance team and provide subject matter expertise in the controls space.
Requirements
Department: Information Security
Function: Legal
Experience Level: Mid-Senior Level