Description
Our client, a leading asset manager based in London is looking for an experienced Information Risk Analyst to join their Risk Management division on a contract basis.
This role sits within the Information Risk Team, who form a 2nd Line of Defence function, with primary responsibility to operate the Information Security Management System and oversee of information security across the firm.
Key Responsibilities
- Ownership and maintenance of the information risk profiles within the company-wide RCSA
- Management and operation of the ISMS risk management cycle and risk structure
- Assessment of information risks with support where necessary from the Head of Information Risk
- Maintenance and distribution of complete, current, compliant and coherent policy and standard sets
Skills/Experienced Needed
- The role will be primarily addressing risk management rather than information technology controls, however exposure to IT and cyber risk management is likely to be very valuable. Experience of the cycle of risk assessment, treatment and review is important.
- Familiarity with policy as a tool and a control, and it will benefit from experience building relationships with users and stakeholders to develop and maintain policy and standards.
- Familiarity with ISO27001
- Understanding of investment management business and regulators would be beneficial but is not essential.