Information Security Risk & Compliance Analyst at AAB managing compliance with ISO 27001, supporting enterprise risk assessments and enhancing information security systems.
Responsibilities
Key duties & responsibilities****As part of AAB's Business Protection Team:
Support the maintenance and continual improvement of the Information Security Management System in accordance with ISO 27001 requirements.
Assist in preparing for internal and external ISO 27001 audits.
Monitor compliance with policies and procedures and follow up on findings or non-conformities
Help maintain ISMS documentation, including asset registers, risk assessments and Statements of Applicability (SoA)
Provide guidance and support with third-party security assessments
Contribute to enterprise risk assessments, control testing and follow up actions.
Assist with risk, compliance and regulatory queries from the wider AAB team.
Support other regulatory compliance process checks and reviews
Requirements
Experience within a risk, information security, compliance or internal audit environment, ideally in a professional services business
Knowledge of ISO27001
High level of integrity, confidentiality and attention to detail
Willingness to engage all levels of seniority across the business and escalate issues appropriately
Forward thinking and effective use of technology
Structured, organised and a good communicator.
Benefits
We want you to feel supported inside and outside of work. That’s why we offer a benefits package designed for your wellbeing, lifestyle, and career. ****
Time Off & Family Support
Annual leave (plus public holidays), with the option to buy or carry over leave
Paid volunteering day to support causes that matter to you
Health & Wellbeing
Private Medical Insurance (PMI) for you and the option to cover family members
Employee Assistance Programme (EAP) for 24/7 mental health and wellbeing support
Death in Service benefit
Financial Security
Competitive pension scheme
Life assurance policies to support you and your family
Flexible & Agile Working
Hybrid working model
Agile working culture that supports flexible hours and smarter working
Modern office spaces designed for collaboration, focus, and wellbeing
****
***Disclaimer***** *Unsolicited CVs sent to AAB by Recruitment Agencies will not be accepted for this position. AAB operates a direct sourcing model and where agency assistance is required, the Talent Acquisition team will engage directly with our recruitment partners.*****
Information Security Risk & Compliance Analyst supporting the maintenance of ISO 27001 standards. Contributing to risk assessments and compliance across AAB’s Business Protection Team.
Information Security Risk & Compliance Analyst at AAB focusing on ISO 27001 compliance and information security management. Collaborating across teams to ensure robust risk and compliance frameworks.
Security Principal at Optiv designing AI security solutions for clients, leveraging advanced security services and technologies. Driving pipeline generation and maintaining strong client relationships as a trusted advisor.
Cloud Security Architect supporting federal customer projects focused on architecture and security solutions. Conducting risk assessments and defining security requirements within a cloud environment.
Information Security Specialist responsible for enhancing cybersecurity posture through incident management and compliance. Collaborating with cross - functional teams to monitor threats and implement security measures.
Senior Lead Info Security Architect leading and collaborating on cybersecurity solutions at TIAA. Responsible for secure design and implementation of cloud security strategies and practices.
Part Time Security Officer providing protection for Collector's personnel and assets at trade shows across North America while reporting to Security Shows & Transportation Manager.
Enterprise Security Architect at PBCN GmbH designing and implementing security architectures. Collaborating with teams to ensure application security and conducting risk assessments.
IT & Security Manager at Medenterprises managing technology and cybersecurity for healthcare professionals in Australia and New Zealand. Leading strategic initiatives and infrastructure to enhance security posture.
Senior Manager leading cybersecurity integration across product lines and services at ADI Global. Overseeing strategies, managing teams, and aligning with organizational goals.