Current jobs related to Information Security Risk Manager - London, Greater London - Conexus DX Limited


  • London, Greater London, United Kingdom CornerStone - Risk, Cyber & Security Full time

    Job Description**About CornerStone - Risk, Cyber & Security**We are a leading, award-winning, independent international Security Risk Consultancy, and we are now seeking a highly skilled Business Development Manager to join our growing team. Our company culture is built upon innovation, teamwork, taking ownership, and supporting each other. We invest in our...


  • London, Greater London, United Kingdom CornerStone - Risk, Cyber & Security Full time

    Job Title: Business Development Manager - Security Risk ConsultancyCornerStone, a leading international Security Risk Consultancy, is seeking a Business Development Manager to join our growing team. As a key member of our team, you will be responsible for driving business growth and developing strategic relationships with clients.Key Responsibilities:Develop...


  • London, Greater London, United Kingdom CornerStone - Risk, Cyber & Security Full time

    About the RoleCornerStone - Risk, Cyber & Security is a leading independent Security Risk Consultancy seeking a highly skilled Technical Security Consultant to join our award-winning team in a UK-wide capacity.We are looking for an individual who thrives in a fast-paced, collaborative environment that values innovation, teamwork, and personal development. As...


  • London, Greater London, United Kingdom CornerStone - Risk, Cyber & Security Full time

    About CornerStone - Risk, Cyber & SecurityCornerStone is a leading, award-winning, independent international Security Risk Consultancy, and we are now seeking a Business Development Manager to join our growing team. We are looking for an individual who enjoys working in a fast-paced, collaborative environment that is built upon innovation, teamwork, taking...


  • London, Greater London, United Kingdom CornerStone - Risk, Cyber & Security Full time

    About CornerStone - Risk, Cyber & SecurityCornerStone is a leading, award-winning, independent international Security Risk Consultancy, and we are now seeking a Business Development Manager to join our growing team. We are looking for an individual who enjoys working in a fast-paced, collaborative environment that is built upon innovation, teamwork, taking...


  • London, Greater London, United Kingdom CornerStone - Risk, Cyber & Security Full time

    About CornerStone - Risk, Cyber & SecurityCornerStone is a leading, award-winning, independent international Security Risk Consultancy, dedicated to providing expert advice and guidance to clients across various sectors.Job SummaryWe are seeking a highly skilled Business Development Manager to join our growing team. As a key member of our sales team, you...


  • London, Greater London, United Kingdom CornerStone - Risk, Cyber & Security Full time

    About CornerStone - Risk, Cyber & SecurityCornerStone is a leading, award-winning, independent international Security Risk Consultancy, and we are now seeking a Business Development Manager to join our growing team. Personal and career development is important to us, and you can expect our investment in you to include personalized development opportunities...


  • London, Greater London, United Kingdom CornerStone - Risk, Cyber & Security Full time

    About CornerStone - Risk, Cyber & SecurityCornerStone is a leading, award-winning, independent international Security Risk Consultancy, and we are now seeking a Business Development Manager to join our growing team. Personal and career development is important to us, and you can expect our investment in you to include personalized development opportunities...


  • London, Greater London, United Kingdom Uniting People Full time

    Job Title: Information Risk and Security ManagerJob Summary:Uniting People is seeking an experienced Information Risk and Security Manager to join our team. As a key member of our organization, you will be responsible for identifying and assessing information security risks across all divisions of our global business.Key Responsibilities:Develop and...


  • London, Greater London, United Kingdom Uniting People Full time

    Job Title: Information Risk and Security ManagerJob Summary:Uniting People is seeking an experienced Information Risk and Security Manager to join our team. As a key member of our organization, you will be responsible for identifying and assessing information security risks across all divisions of our global business.Key Responsibilities:Develop and...


  • London, Greater London, United Kingdom Wave Talent Full time

    Position OverviewIn this pivotal role, reporting to the Head of IT Resilience, Information Security, and Governance, Risk Management, the individual will oversee the management of operational risks associated with Information Security and Technology.The ideal candidate will contribute to the Operational Risk Management framework, focusing on the...


  • London, Greater London, United Kingdom BDO Full time

    Job Title: Information Security Analyst (Risk)BDO is a leading professional services provider with a global presence. Our core service lines generated annual revenues of over US$14 billion in 2023.We're a people-powered business with a diverse, dynamic, and inclusive international team committed to excellence, innovation, and integrity. Our collaborative...


  • London, Greater London, United Kingdom BDO Full time

    Job Title: Information Security Analyst (Risk)BDO is a leading professional services provider with a global presence. Our core service lines generated annual revenues of over US$14 billion in 2023.We're a people-powered business with a diverse, dynamic, and inclusive international team committed to excellence, innovation, and integrity. Our collaborative...


  • London, Greater London, United Kingdom CornerStone - Risk, Cyber & Security Full time

    About CornerStone - Risk, Cyber & SecurityCornerStone is a leading, award-winning, independent international Security Risk Consultancy, and we are now seeking a Business Development Manager to join our growing team. We are looking for an individual who enjoys working in a fast-paced, collaborative environment that is built upon innovation, teamwork, taking...


  • London, Greater London, United Kingdom CornerStone - Risk, Cyber & Security Full time

    About CornerStone - Risk, Cyber & SecurityCornerStone is a leading, award-winning, independent international Security Risk Consultancy, and we are now seeking a Business Development Manager to join our growing team. We are looking for an individual who enjoys working in a fast-paced, collaborative environment that is built upon innovation, teamwork, taking...


  • London, Greater London, United Kingdom BDO Full time

    Job Title: Information Security Analyst (Risk)BDO is a leading professional services provider with a global presence. Our core service lines generated annual revenues of over US$14 billion in 2023.We're a people-powered business with a diverse, dynamic, and inclusive international team committed to excellence, innovation, and integrity. Our collaborative...


  • London, Greater London, United Kingdom BDO Full time

    Job Title: Information Security Analyst (Risk)BDO is a leading professional services provider with a global presence. Our core service lines generated annual revenues of over US$14 billion in 2023.We're a people-powered business with a diverse, dynamic, and inclusive international team committed to excellence, innovation, and integrity. Our collaborative...


  • London, Greater London, United Kingdom BDO Full time

    About BDOBDO is a leading professional services provider with a global presence. Our core service lines include Audit & Assurance, Tax, Advisory, and Business Services & Outsourcing. We have a diverse team of over 115,000 professionals operating in 166 countries and territories.Job DescriptionWe are seeking an experienced Information Security Analyst (Risk)...


  • London, Greater London, United Kingdom BDO Full time

    About BDOBDO is a leading professional services provider with a global presence. Our core service lines include Audit & Assurance, Tax, Advisory, and Business Services & Outsourcing. We have a diverse team of over 115,000 professionals operating in 166 countries and territories.Job DescriptionWe are seeking an experienced Information Security Analyst (Risk)...


  • London, Greater London, United Kingdom BDO Full time

    About BDOBDO is a leading professional services provider with a global presence. Our core service lines include Audit & Assurance, Tax, Advisory, and Business Services & Outsourcing. We have a diverse team of over 115,000 professionals operating in 166 countries and territories.Job DescriptionWe are seeking an experienced Information Security Risk Manager to...

Information Security Risk Manager

3 months ago


London, Greater London, United Kingdom Conexus DX Limited Full time

Conexus has partnered with a Global Pharmaceutical Company to source an Information Security Risk Manager who will be responsible for assessing, reporting, and managing information security risks identified in our systems and data, business processes, and third-party service providers. You will work closely with IT colleagues and business stakeholders based at multiple locations in Europe, USA, and Japan. As this is a remote role, we are seeking a candidate with exceptional time management skills and the ability to work independently.

The Team: You will be delivering your services supporting a recently created Information Security, Risk and Compliance Management (ISRM) Team. This team is accountable for the design and implementation of our information security, risk management, and compliance strategy and program globally.

Responsibilities:

  • Support the design and improvement of the information security framework (ISF): policies, controls, and procedures using the NIST Cyber Security Framework, including third-party risk management.
  • Assess new and existing systems, data flows, business processes, and third-party provider engagements to implement and verify compliance with the ISF, reporting identified risks and issues.
  • Perform information security risk assessments, including security business impact analysis (BIA), business dependency analysis, security controls plan, controls maturity assessments, and third-party provider risk profiling, assessments, and audits.
  • Maintain the information security risks and issues registers, deliver high-quality reports, and run information security committee meetings with business and IT management to manage risks.
  • Support the design and improvement of third-party information risk management policies, controls, and procedures. Assist or lead assessment of information security risks arising from engagements with third-party providers and drive remediation efforts.
  • Drive the design and implementation of a GRC platform, including functional requirements, reviewing process designs, rolling out new processes to the business and IT teams, and supporting the administration and maintenance of the GRC tool.
  • Design, improve, and periodically report security key risk indicators and metrics to IT and business management to support continuous improvements and increase security maturity.
  • Design and deliver the security education training awareness program (SETA) across all business functions. Manage external resources supporting the security awareness activities.

Desirable Experience:

  • Implementing controls and managing compliance risks regarding GXP regulated systems, data protection regulations such as EU and UK GDPR, CCPA, and cybersecurity regulations such as the EU NIS2 and USA SEC Disclosure Requirements.

Education, Certifications, and Skills Required:

  • Minimum of 10 years of professional experience in information technology, with at least 3 years as an information security risk manager, preferably in pharmaceutical, biotechnology, or other manufacturing organizations.
  • Bachelor's or master's degree in information security or Information Technology.
  • Relevant information security professional certifications, e.g., CISSP, CISM, CRISC, CISA, GSEC-GIAC, ISO 27001 auditor/practitioner.
  • Desirable: Training and/or certifications in GRC platforms such as ServiceNow GRC, Archer, Metricstream; and the NIST Cyber Security Framework.

If this position is of interest, apply here or contact me directly for more details.