Information Security Officer

**Vacancy Name**
- Information Security Officer

**Vacancy No**
- VN1254

**Location City**
- London

**Location Country**
- United Kingdom

**Job Title**:Information Security Officer
- **Reports to**:Chief Information Security Officer
- **Department**:Information Security / Technology
- **Location**:London / Leeds**DEPARTMENT DESCRIPTION**

The Technology department is led by the Technology Director who reports to the Chief Operating Officer.
- The Technology Department is charged with:

- Development, communication and execution of the company’s Technology Strategy, Governance processes, Architectural guidelines, and Risk management
- Change delivery for Platforms, Systems and Processes, supporting our business verticals
- Provision of secure, efficient and high-quality IT and Broadcast services

Driven by the Channel’s Future4 strategy, our business is undergoing an accelerated digital transformation. To deliver this future, Channel 4 are refreshing the operating model of the technology team. The operating model is aligned with the four key areas of Channel 4’s business, Content; Marketing and Viewer Experience (incl. All 4); Commercial; and Operations (incl. ERP), each having a technology leader embedded alongside the business leader.
- These business orientated units will be supported by a strong central function that provides leadership and services through Strategy, Architecture & Data, Service Management, and Governance Risk & Compliance.**JOB PURPOSE**

The purpose of the role is to assist the CISO in the running of the cyber security department, which looks after the confidentiality, Integrity and Availability of Channel 4’s assets. The individual will oversee security projects, manage the Cyber Security risk register and ISO27001/NIST compliance activities, as well as help produce the cyber security strategy designed to support Channel 4’s commitment to its corporate Digital strategy. Part of the role is to liaise closely with the operational teams and assist to ensure security related requirements are met on an ongoing basis. The role will also include responsibility to assist as a mentor to other members of the team and contribute towards the company’s apprentice scheme.**KEY RESPONSIBILITIES**
- Take a proactive approach to identify gaps and opportunities for improvement to mitigate Technology risk and threat.
- Support operational security activities including oversight of ongoing specific security processes (e.g., incident response, ad hoc queries, periodic access reviews, and vulnerability management).
- When applicable, discusses designed solutions beforehand with the technology architects to mitigate information risk.
- Align Information security and Privacy technical measures to business needs.
- Assess, highlight, and help manage Risk across Technology from an information security and cybersecurity perspective.
- Evaluate and highlight privacy requirements in any Technology project and existing operations, assisting in defining and managing the reduction of potential exposure.
- Create and maintain up to date Configuration Standards and Security Procedures and ensure such standards and operational procedures are known and well applied by the interested people.
- Update knowledge by tracking and understanding emerging security practices and standards; participating in educational opportunities; reading professional publications; maintaining personal networks; participating in professional organisations.

**ESSENTIAL EXPERIENCE & SKILLS**
- Awareness of standards frameworks:

- ISO27001, NIST, CIS, COBIT, GDPR
- Expertise in information security knowledge and delivery
- Experience of successfully delivering in a similar level role
- Experience of the full software development delivery lifecycle for technology projects from requirements to retirement
- Experience of working on projects and liaising / providing technical input to projects in a timely fashion
- Communications skills, with the ability to present ideas verbally and in writing
- Collaboration skills, with the ability to win trust and gain input from stakeholders, 3rd parties and colleagues
- An ability to multi-task and prioritise across several concurrent projects and activities
- Demonstrates a willingness to share, be open and provide input to others’ needs
- Demonstrates a passion for improving process and driving forward efficiency improvements
- Proven analytical thinking skills with strong problem-solving ability and a focus on getting things done
- Creative with the ability to think outside the box and challenge the status quo

**DESIRABLE EXPERIENCE AND SKILLS**
- Will take ownership of a problem, and knows when to escalate
- Stakeholder management and engagement
- Relationship management and engagement
- Ability to build teams and mentor colleagues, to be a facilitator when required
- Ability to see the bigger picture
- Ability to maintain composure under pressure
- Ability to pick the right communicatio