Job Description: • 2-minute read •
The Information Asset Manager, part of the Information Security Team, supports the business in ensuring the confidentiality, integrity and availability of Burberry Information. The role includes the ownership / maintenance of the Information Asset Register, as well as the classification framework and Retention Schedule.
RESPONSIBILITIES
Working with business and IT teams to identify, record and assess Burberry information and information classifications, tracking the information and the associated controls
Maintain the information asset register and information classification framework
Maintain the information retention schedule
Provide assistance to business teams in the information management considerations of business operations and new projects
Provide assistance to IT teams in defining and executing action plans to implement effective information handling and data management
Monitor compliance with the agreed controls on a regular basis
Manages and maintains reporting of information control / compliance progress
Maintain the information register and support continuous improvement of information management processes
Supports internal and external audits to ensure their success.
PERSON PROFILE
Extensive and proven information management experience, ideally in retail
Experience in asset, records and information risk management
Good knowledge of data protection and privacy regulations
Good understanding of data governance and the data lifecycle
Knowledge of ISO 15489, ISO 55000, ISO 27000 series of standards desirable
Experience in all of the following areas: IT Audit, Information Security, working within a control framework
Knowledge of NIST Cybersecurity Framework and CIS Critical Security Controls desirable
Knowledge of information management, security and risk strategies
Good knowledge of collaboration platforms including Office 365 SharePoint, Salesforce, on-premises and cloud-based
Knowledge of security controls used to protect information including Access Controls, DLP, Encryption, MDM
Good knowledge and understanding of system development lifecycle and its implications on BAU service
Have excellent relationship management skills and able to influence business and IT stakeholders
experience of working within a complex and dynamic business environments
Critical thinking skills with strong attention to detail and follow up
High degree of professionalism and personal integrity
Ability to work with a high degree of independence
Excellent documentation skills (process, control, policy, and risk documentation)
Ability to learn quickly and apply risk/control considerations, mindful of business process impact.
Pass it on for Referral Bonus. Not the right role for you, but know someone we should meet? Share with him to earn $1,000 referral bonus.