Description
Henderson Scott are looking for a interim information security consultant for an international finance institute.
Key accountabilities for this role include:
- Providing expert advice to Energy Suppliers undertaking Security Assessments (SAs);
- Monitoring the progress of suppliers who have booked SAs;
- Maintaining, making available and publicising SA related documentation including the Security Controls Framework (SCF);
- Undertaking validation of supplier management responses;
- Liaising with Users to enable an improved supplier management response to be provided in advance of validation or review;
- Briefing the Senior Security Expert on any sensitivities or emerging issues from liaison with Energy Suppliers and/or Third Parties and providing relevant background and issues to be considered;
- Monitoring all security incidents and vulnerabilities reported by following the incident management process and advising the Senior Security Expert on materiality of the vulnerability or incident accordingly;
- Undertaking the review of ISO standards, cryptographic standards and other best practices as enshrined in the Smart Energy Code (SEC)
With the approval maintain the SEC Security artefacts and arrange for regular reviews to ensure that the artefacts are up to date, including:
- the End-to-End Risk Assessment;
- the Security Requirements;
- the Risk Treatment Plan;
- a Traceability Matrix to map risks to requirements and a SEC obligation;
- the Security Architecture Document;
- the Security Assurance Document;
Conduct ad hoc risk assessments periodically by monitoring the threat landscape and advising the Senior Security Expert of any material changes arising from threats or business impact levels.