Information Governance Officer - Retail Bank

Assisting department head to maintain information security policies and procedures
Enforcing the bank's security policies as necessary including reviewing access requests, policy exception requests, etc.
Performing information risk assessments for key information processes and tracking any vulnerabilities
Working with Legal staff and the business to review contractual provisions for information security and risk related clauses and negotiating the bank's requirements as necessary
Reviewing change requests for compliance with policies and highlighting any potential non-compliances or risks
Performing quarterly data loss control checks
Implementing policies and procedures for data access logging and monitoring
Having oversight of PCI DSS compliance as necessary
Liaising with Group Audit as necessary concerning information security related audits
Designing and implementing information security training for staff
Leading or assisting investigations if necessary
Review of key third parties storing, processing or transmitting the bank's confidential or customer information
Data Protection Compliance
Assisting the Data Protection Officer to maintain Data Protection policies and procedures
Providing consultancy to IT in implementing data discovery tools and assigning data owners
Assisting in Data Retention projects and processes as necessary
Designing and implementing Data Protection training for staff
Keeping up to date with industry and regulatory requirements for information risks, data protection and liaising with the business as necessary

Also assisting with Operational Risk related work if necessary

Who we're looking for

Prior experience covering Information Security / IT Security / Data Protection / PCI DSS
Established financial services experience and a knowledge of the principles of "Treating Customers Fairly" desirable but not essential
Some experience of working with senior management including Directors, operational and technical staff desirable

Level of education/attainments (e.g. A levels, degree, professional qualifications including subjects studied, training)

Educated to degree level or equivalent (Information Security related subject desirable but not essential)
Professional qualifications such as CISM, CISSP, ISO27001, Data Protection awareness training desirable

For more information please contact Nur Haque on 0121 265 7474To find out more about Real Staffing please visit www.realstaffing.com