Responsibilities:

• Contribute to the ongoing development and improvement of the firm’s governance, risk management, and compliance program.
• Provide support to clients by addressing information security assessments.
• Conduct information security risk assessments for third-party vendors and suppliers.
• Collaborate with the Information Security Director and other stakeholders to enhance security procedures, training, IT processes, and system security.
• Review and revise the firm’s information security policies.
• Monitor and coordinate activities related to certifying the firm’s ISO 27001 certification for its Information Security Management System.
• Coordinate with various IT teams and departments to conduct risk assessments and monitor risk mitigation and remediation efforts.
• Communicate effectively with stakeholders across all levels of the organization.
• Analyze and report on risk trends and metrics.
• Analyze client and stakeholder requirements to support Business Continuity planning efforts.
• Assist in the development of Business Continuity and Disaster Recovery plans and related documentation in line with recognized standards and best practices.

Preferred Qualifications:

• Bachelor’s degree or equivalent experience in Information Systems Security or a related field.
• Minimum of 3 years of relevant experience in a similar role.
• Relevant certifications.
• Strong written and documentation skills.
• Highly organized with strong communication abilities.
• Self-motivated individual capable of working independently, while also knowing when to seek consultation.
• Ability to manage multiple projects and thrive under deadlines.
• Enthusiastic, adaptable, and willing to assist wherever necessary.
• Demonstrated commitment to learning and advancing in the cybersecurity field.