Glasgow Hybrid - 2 days in office

3 months

Outside IR35

Role Overview:
We are seeking an experienced Information Security Analyst with a strong background in ISO27001 standards, controls testing, and experience in transitioning to the ISO27001:2022 standard. This role is critical to ensuring compliance with evolving information security requirements and maintaining a robust security posture, especially as the client work toward ISO27001 recertification.

Key Responsibilities:

• Support and manage ISO27001 controls testing and implementation to ensure ongoing compliance.
• Lead efforts in transitioning the organization to the ISO27001:2022 standard, identifying gaps, updating policies, and driving necessary changes.
• Conduct regular audits and risk assessments, monitoring compliance with ISO27001 standards and other security policies.
• Support the ISO27001 recertification process by coordinating necessary actions, documentation, and audit responses.
• Analyze, document, and improve information security controls, advising on best practices and necessary adjustments to maintain compliance.
• Collaborate with internal stakeholders to ensure all business functions align with ISO27001 standards and information security best practices.

Essential Qualifications & Skills:

• Proven experience in an Information Security Analyst or similar role, with specific experience in ISO27001 standards.
• Deep knowledge of ISO27001:2022, including controls testing, compliance requirements, and transition procedures.
• Experience in ISO27001 recertification processes, including preparing for and managing audits.
• Familiarity with risk assessment methodologies and regulatory requirements for information security.
• Strong analytical and problem-solving skills, with attention to detail.
• Excellent written and verbal communication skills for effective collaboration with technical and business teams.

Please note, for this role you must be available to come to the client site 2 days per week.