Controls Assurance Officer

BACKGROUND:

At what is a time of significant development in the Group Information Risk Management function, we have an excellent opportunity for a Controls Assurance Officer to join our department on a 12 month temporary contract.

The Group Information Risk Management function provides a second line of defence in the areas of information security, privacy and disaster recovery. The newly formed Controls Assurance section will be responsible for ensuring the YBS Group maintains an appropriate control environment for information storage and processing.

PURPOSE OF THE ROLE:

The team will ensure that an appropriate framework of control exists to support the management of information risk, including policies, guidelines and standards. The Controls Assurance Officer will also undertake assurance work to assess the effectiveness of the control framework.

In particular the role will involve ensuring the appropriateness of the YBS Group Information Security, Disaster Recovery and Privacy policies to ensure that we are operating in accordance with best practice and relevant regulation/legislation.

Risk assessment, ensuring issue management processes are effective, and developing relevant awareness programmes are also key to this role.

IF YOU HAVE:

- Excellent knowledge of information risk
- A risk, control and assurance background
- Knowledge of industry frameworks and standards such as COBIT5, ISO27001, Data Protection Act and PCI
- Excellent verbal and written communication skills
- Strong influencing and problem solving skills
- Experience of audit, assurance or compliance activity