Recruiter: NGA Human Resources
Location: K-Hertfordshire-Hemel Hempstead
Travel - Yes, 25 % of the Time
Unposting Date - Ongoing
NGA Human Resources is currently seeking a qualified Information Security Risk Officer to deliver world-class security solutions supporting multiple HR platforms in our UK and Australian region. NGA Human Resources is a market-leading, global, Human Resources services provider offering innovative HR business solutions through HR Technology, HR Outsourcing, and HR Consulting.
Dimension & Scope:
The UK InfoSec Risk Officer is responsible for managing multiple aspects of IT security controls as they relate to Data Security, SOC1/SOC2 Audits, Client Audits and security Certifications. This position has primary ownership and operational responsibility for the formulation and delivery of information security controls and strategies that enable the UK NGA business to achieve world class benchmarks of customer service and support. The UK InfoSec Risk Officer will need to be proficient in applying security controls across all aspects of the infrastructure to include OS, DB, application, network, and endpoint devices as well as develop a working knowledge of NGA’s various IP and Third Party platforms. The UK InfoSec Risk Officer will be fluent in IT technology, security concepts and risk management in order to communicate effectively and persuasively with external auditors, client auditors, and business/IT operations.
Principal Duties and Responsibilities:
Drive the on-going harmonization and stabilization of security controls across multiple HR platforms supporting enterprise and small/medium business
Support Security and Risk Management team’s efforts in the areas of International Certification Standards, including ISO 9001, ISO 27001, ISO 22301, Cyber Essentials etc
Interface with external and client auditors as it pertains to the effectiveness of IT security control environment.
Act as Client-facing security consultant regarding various aspects of Data Security and other functions managed by SRM
Reports to and coordinates with the Chief Information Security Officer in the development and governance of information security policies and standards
Performs follow-up to ensure appropriate corrective action has been taken to resolve any identified internal security control weakness.
Ensure close liaison with business process groups to ensure new initiatives are developed with full understanding of relevant architecture / infrastructure standards and procedures.
Champion any new technologies that would enable more efficient and effective security controls and ensure new technologies are investigated and proposals put forward regarding suitability and benefit.
Analyze the effectiveness of standards, policies, procedures and security guidelines for all SRM security activities
Performs consultative services and/or forensic investigative assignments, as requested by senior management and/or the company’s Governance Risk Compliance Committee.
Collaborate with business leaders with the implementation of NGAHR’s Information Security and Data Privacy Policies and Standards.
Collaborate with colleagues across the organization to drive process change in Data Protection and Information Security related disciplines.
Advise the business and local teams on the process for handling and reporting Security Incidents that affect PII to include creation, investigation, and resolution via S-NOW incident reporting procedures.
Promote security awareness and education within the business by promoting compliance eLearning, encouraging awareness through team discussions and communication activities.
Liaise with the Security Team and Data Privacy members for advice and guidance to arrive at effective security and privacy solutions
NGA Human Resources offers you a unique chance to build a career in a vibrant, agile and growing organization, yet one with truly global client relationships and a wide range of opportunities.
At NGA, we’re dedicated to our clients, and we operate as a single, global team striving for excellence and innovation in everything we do. Talk to NGA and discover what A World of Opportunity can mean for you.
We offer:
• Pension, Life Assurnace and Private Healthcare as standard
• 22 days annual leave, plus 3 days for Christmas Shutdown
• Flexible benefits package that can be tailored to your personal needs
NGA Human Resources is a market-leading, global, Human Resources services provider offering innovative HR business solutions through HR Technology, HR Outsourcing, and HR Consulting.
NGA is uniquely positioned to help HR leaders realise the true value of workforce management. We combine a focus on customer value with many years of experience in HR consulting, HR outsourcing and HR technology. This is the core of our business and why we are recognised as a leader in the global HR solutions market.
Our 8,500 employees are dedicated to delivering excellence through HR consulting, HR outsourcing and HR technology. As a recognised global HR services leader, we have offices in 35 countries on five continents, supporting customers in more than 100 countries.
● Over 1,000 ERP-based HR implementations globally
● 3,000 Large Enterprise customers
● 10,000 Small and Medium customers
● Over 20% of FORTUNE Global 500® companies serviced
● 40% of UK working population are paid by NGA Human Resources’ solutions totalling 54 million payslips produced per annum servicing 19 million UK workers
Our Values
Innovation: We are a creative and resourceful organisation. We have a talent for looking at things differently and are passionate about bringing new ideas to life.
Speed: Our energy and focus means that we always deliver quality, quickly and efficiently
Responsibility: We can count on each other. We personally take responsibility for delivering on our promises. We trust our colleagues to do the same.
Excellence: We are committed to excellence. Our internal and external customers are at the heart of everything we do and we strive to over-achieve.
One Team: Ours is an interactive environment. We celebrate our diversity and recognise the strength of what we can achieve as a united team.
NGA Human Resources offers you a unique chance to build a career in a vibrant, agile and growing organization, yet one with truly global client relationships and a wide range of opportunities.
At NGA, we’re dedicated to our clients, and we operate as a single, global team striving for excellence and innovation in everything we do. Talk to NGA and discover what A World of Opportunity can mean for you.
Education & Professional Certifications:
Bachelor's degree in related field from a four-year college or university with ten or more years related experience; or
Equivalent combination of education and experience.
Professional Security Certifications desired
Candidate Profile:
Seven to ten years of information security risk management experience or equivalent combination of education and experience.
Significant experience (minimum 3 years) with large-scale, multi-functional project management.
Ability to define problems, data collection, establishes facts, and draw valid conclusions.
Experience with problem and change management is required. Must have experience managing cross-functional teams.
Strong project management experience with a history of delivering projects on time and within budget.
Excellent communications skills and the ability to interface at high levels.
Strong negotiation skills.
Thorough understanding of Data Center operations and planning.
Must be PC literate with software such as MS Word, PowerPoint, Excel and Lotus Notes.
Good understanding of project management tools including Microsoft Project and Project Workbench for Windows.
Team oriented with the ability to supply input to and receives feedback from peers.
Multi-dimensional in thinking, planning, implementation and problem solving.
Excellent skills in dealing with staff, clients, vendors, contractors and management.
Exhibit good oral and written presentation skills.
Strong demonstrated personal leadership and analytical skills.
Excellent interpersonal skills.
