Security Governance, Risk & Compliance Lead

Monarch are working with a large government organisation that are recruiting for a Security Governance, Risk and Compliance Lead on a 2 year fixed term contract. This position is 100% remote and if you wanted to go on site, they have offices in London and in Leeds. 

This is a brand new position, where the organisation are growing their security team and looking for an experienced Security lead who will be able to make the position their own and help make a real change to the security landscape within the organisation. 

Some of the skills required:

• Experience of authoring governance documentation (standards, policies, reporting, proposals, analysis)
• Understanding of common security standards, frameworks and regulations relating to the health industry environment (Data Security and Protection Toolkit (DSPT), ISO2700x (International standard for information security management), GDPR, Cyber Assessment Framework (CAF), MITRE (A framework for cyber adversary behaviour)
• Strong knowledge of Security controls across Microsoft based technologies, Endpoints, IdAM, Networks, Applications, Email and Cloud
• Excellent interpersonal, communication, and presentation skills, including formal report writing experience
• Knowledge and experience of utilising different media to communicate, educate and assess security issues, messages and training across a varied audience.
• Willingness to learn and keep abreast of the ever-changing security landscape including trends and technologies and market issues and dynamics.

• Responsible for establishing and implementing the information security risk management programme
• Identify, engage and manage 3rd party organisations to ensure appropriate security assurance activities are conducted
• Aid in threat detection, information and cyber security events/incident response, and forensic investigations
• Provide security input and advisory services for BAU activities as well as projects
• Liaise with other bodies to contribute to the maturing of cyber security practices across the Health and Social care industry