Job Title

Are you an experienced Information Security Officer ?Would you like to work for a global company who operate from prestigious offices in the centre of Glasgow ?My client is looking for an experienced InfoSec Officer to work with them on a permanent basis.Its hybrid working, 3 days in the office and 2 from home.Main responsibilities include:This role is responsible for ensuring the security of systems and data by evaluating the risks associated with third-party vendors and internal projects and recommending appropriate risk mitigation strategies.The Information Security Officer will work closely with cross-functional teams, including the IT, Risk & Compliance, project management, and technical teams, to ensure compliance with security standards and best practices.3rd party risk assessments, supporting incoming questions, supporting technical operational side on policy question, picking up tickets from service desk, managing the mailbox. Attending meetings.Involved in internal audits - working closely with OGC, Client audits, client commitments team Contract reviews - making sure correct info sec clauses are in placeProjects – this will come in time, once they are comfortable with the BAU, types of projects Skills & Experience:Strong Governance/ Risk & compliance GRC background from an information security point of view. If you have a tech background - moved into GRC that would be idealBachelor's degree in Computer Science, Information Technology, or a related field (or equivalent work experience).Professional certifications such as CISA, CISM, CISSP or similar credentials are preferred.Strong knowledge of information security principles, best practices, and standards (e.g., ISO 27001, NIST CE+).Experience in co-ordinating and participating in Security audits.Experience in supporting projects from inception through to completionExperience in stakeholder engagement, supporting ISMS governance and implementation across multiple projects or programs of workExperience in conducting project security risk and vendor risk assessments.Familiarity with security frameworks and assessment methodologies.Knowledge of regulatory requirements related to data privacy and protection (e.g., GDPR, CCPA) is a plus.Strong analytical and problem-solving skills.Excellent written and verbal communication skills.Ability to work independently and collaboratively in a team-oriented environment.Attention to detail and a commitment to maintaining high-quality standardsThis is a fantastic opportunity to join this leading company who offer a great working environment.For more information please get in touch asap.