- Developing and implementing information security and assurance policies and procedures.
- Undertaking internal audits and accreditation activities
- Facilitating and leading meetings with internal and external stakeholders at senior level.
- Liaising with other organisations and agencies on information security matters.
- A recognised information security, data protection or information risk qualification (e.g Certified Information Security Manager (CISM), CISSP, GCRC, CRISC, DP PDP, BCS etc)
- Practical knowledge of current Information Security Cyber and Assurance Management standards and best practice (including ISO 27001/NIST Framework).
- Knowledge of current data protection legislation, standards and practice.
- Knowledge and understanding of the Technical, Human Resource, Procurement, Project, and Physical Security issues that impact upon information security and assurance.