Gatwick, West Sussex
Up to £55000 per annum
almost 2 years ago
A leading aviation body is seeking an experienced Information Security professional for a new role based in their Gatwick office. This represents a great chance for a skilled Information Security professional to join an organisation of 1200 people, and one which is growing substantially. The role will contribute to ensuring the organisation becomes focused on security by design moving forwards.
You will work with a wide range of projects to create a set of information security requirements, based on company standards and industry best practise (ISO27001-5, NIST, OWASP etc), that are appropriate for the risk profile of the project. You will assess the impact of the project on information security; and work with the project in delivering the required secure design and secure solution. You will be responsible for the secure design aspects of the project
You will also be involved in reviewing project documentation including technical designs and ensuring that information security requirements are adequately tested by co-ordinating external and/or internal security testing.
You will be working in collaboration with the IT Security Manager in developing, implementing and monitoring a comprehensive enterprise wide information security programme, based on accepted industry standards, to ensure the availability, integrity and confidentiality of information owned, controlled and processed by the organisation.
-Experience in the practical application of information security concepts and practices
-Experience of reviewing technical designs and solutions to identify security risks and opportunities for improvement
-Experience of embedding security by design throughout project engagement
-Experience of designing security into such technologies as Microsoft Azure and it's services and components
-A good understanding and experience in the application of ISO27001/27002, NIST, OWASP and regulatory requirements (GDPR, PCI DSS compliance)
-Excellent understanding of the current and emerging threats and countermeasures in information security.
-Familiarity with cloud based solutions and infrastructure.
Closing date: 16th November
Please send your CV for immediate consideration.