As an Information Risk Analyst you will be working in the Information Risk Team supporting the business and IT teams in managing Burberry Information risks. The role includes executing a variety of annual/quarterly/monthly procedures/controls such as user access reviews, policy updates, testing etc. The role also interfaces with the business; IT, both internal and external auditors and other compliance initiatives, including providing requested audit inputs.
Working with business and IT teams to identify, assess and treat information risks; tracking the risks and the associated controls
Provide assistance to business teams in the risk and security considerations of business operations and new projects
Provide assistance to IT teams in defining and executing action plans to implement controls
Monitor compliance with the agreed controls on a regular basis
Manages and maintains reporting of control / compliance progress
Supports implementation of an overall control framework (comprehensive control set) in IT e.g. COBIT
Maintain the risk register and support continuous improvement of IT risk management processes
Supports internal and external audits to ensure their success.
PERSON PROFILE
Proven information risk management experience, ideally in retail
Experience in all of the following areas: IT Audit, Information Security, conducting supplier security reviews, working within a control framework
Good knowledge of data protection and privacy regulations
Knowledge of ISO 27000 series of standards, NIST Cybersecurity Framework, CIS Critical Security Controls
Knowledge of security related products, Information Security Management Systems and security / risk strategies
Good understanding of security controls used to protect applications and infrastructure technologies including Data Loss Prevention, Advanced Threat Detection and Prevention, Cloud Computing and Mobile
Good knowledge and understanding of system development lifecycle and its implications on BAU service
Have excellent relationship management skills and able to influence business and IT stakeholders
Experience of working within a complex and dynamic business environments
Critical thinking skills with strong attention to detail and follow up
High degree of professionalism and personal integrity
Ability to work with a high degree of independence
Excellent documentation skills (process, control, policy, and risk documentation)
Proven experience implementing and delivering discipline in controls, in an organised manner
Ability to learn quickly and apply risk/control considerations, mindful of business process impact.
Pass it on for Referral Bonus. Not the right role for you, but know someone we should meet? Share with him to earn $1,000 referral bonus.
Subscribe to us
100% Free.
close