• Job Description

  Req#: INFOR003647
  About the Role
  
  The Information Security and Compliance Analyst role works collaboratively with stakeholders across the business on various activities related to quality, environment, risk, data security, privacy and compliance, with the aim of enabling Talogy to comply with ISO, PCI and other industry standard frameworks.
  
  This is a full time, permanent position, Monday to Friday, with flexible hours around a standard 0900-1700.
  
  Role Responsibilities
  
  
  • Responsible for ensuring the third-party risk assessment program is categorised and handled in line with industry standards and best practice, including maintenance of the third-party risk assessment library and annual reviews.
  • Supporting the development, documentation and maintenance of policies, procedures, and standards across the organisation, ranging from information security and data protection to quality management and environmental management.
  • Supporting the continuation of ISO 27001, ISO 9001, ISO 14001, and ISO 20000 certifications.
  • Assisting with ensuring compliance with established key metrics that measure data security standards, the ISO standards/certification and provide evidence of compliance for internal and external audits.
  • Assisting with the development of GRC related newsletters and training.
  • Identifying and reporting on gaps related to security and compliance and other tasks to support the group's underlying data and information security processes, infrastructure and ensuring measures are fit for purpose and scaled to deliver an appropriate level of protection.
  • Maintaining a close relationship with the providers of any outsourced contracts for services such as annual audits or other 3rd party contracts.
  • Being a security and compliance champion in promoting and developing awareness of different security and compliance risks and best practices across the company.
  
  
  Knowledge, Skills, and Experience Requirements
  
  
  • Information security or compliance experience with a proven ability to engage confidently with Senior Management and staff from all other departments in the International Group.
  • Governance experience - organising meetings/training, writing agendas, taking minutes, managing action logs.
  • Someone who is highly organised, reliable, flexible and has exceptional attention to detail.
  • Experience in working on Microsoft products and can learn new systems quickly.
  • Experience in working on an ISO standard (preferably ISO 27001, 9001, 14001 or 20000) - a good knowledge of ISO structures, gathering evidence for audits and gap analysis.
  
  
  Background in the technology sector.
  
  A solid understanding of data management, plus data and information security, including working knowledge of the latest trends and technologies.
  
  Information security management qualifications or similar.
  
  Consultancy experience and/or demonstrable experience of providing support to various teams and stakeholders.
  
  Behavioral Competency Requirements
  
  Navigating Challenges
  
  Problem Solving: Gathers information needed to solve internal problems. Identifies the root causes of the issues. Leverages available data and resources to resolve problems. Escalates issues to the supervisor or others (experts), if needed.
  
  Critical Thinking: Evaluates information for accuracy, relevance, importance, and reliability. Questions whether existing practices, procedures, and processes are appropriate and suggests improvements. Assess how actions will affect related systems and the overall output. Considers short- and long-term implications of decisions.
  
  Managing Conflict: Anticipates and addresses likely areas of disagreement or conflict before problems arise. Maintains a neutral and objective point of view working toward resolution. Focuses on the problem, not the person. Seeks to resolve conflict by finding common ground, ways to compromise, and a mutually satisfactory solution.
  
  Supporting Across Teams
  
  Communication: Listens attentively to others. Asks questions to verify own understanding. Explains issues and solutions in a way that is easy to understand. Demonstrates confidence and credibility.
  
  Building Relationships: Interacts with others in a friendly and polite way. Seeks opportunities to connect with others. Develops relationships with co-workers from other teams and departments. Maintains confidentiality as needed.
  
  Teamwork: Offers to help others with their work. Openly shares relevant knowledge, expertise, and information. Respects others' talents, expertise, and contributions. Collaborates with others to achieve common goals.
  
  Driving Quality and Improvement
  
  Leading Change: Shows willingness to try new approaches and helps others adapt. Advises others on the benefits of change. Adopts an optimistic view of change, focusing on the positives. Adjusts course of action quickly in response to new information or challenges.
  
  Digital Dexterity: Leverages technology to positively impact quality of product, process, and communication. Engages and experiments with technology and functionality. Uses different and/or new technologies to complete work as effectively as possible. Adjusts work methods and flow to accommodate new technologies.
  
  Prioritizing and Planning: Prioritizes tasks/assignments by considering importance, complexity, deadline, and resources. Uses an orderly and structured approach to work. Coordinates resources and activities to accomplish goals. Develops or uses systems to keep track of priorities, commitments, and follow-up.
  
  Drive for Results: Works with a sense of urgency to drive tasks through to completion. Maintains a clear focus on what needs to be done to achieve the end goal. Exerts extra effort or time to achieve objectives. Meets service and productivity expectations as outlined in internal policies.
  
  Benefits:
  
  Medical, Dental, Vision, Life, and Short and Long-Term Disability Insurance
  
  Flexible Spending Accounts
  
  
  • 401k plan with company match
  • Generous PTO and Holiday Pay
  
  
  Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities
  
  This employer is required to notify all applicants of their rights pursuant to federal employment laws.
  For further information, please review the Know Your Rights notice from the Department of Labor.

• About the company

  The best remote jobs for you

Notice