Information Security Specialist Lead

About the role

Reporting to the Head of Information Security Policy and Standards, you will lead the identification, documentation, and implementation of Experian's security risk and controls framework. You will ensure a robust security posture by designing and applying risk‑based controls across the enterprise.

Key responsibilities

• Lead the security risk and control modularisation strategy, collaborating with regional business units and central security owners.
• Maintain and update the integrated risk and control framework in line with policies, standards, and regulations.
• Review and challenge first‑line business unit control activities, ensuring alignment with control standards.
• Identify control gaps, document findings, and recommend remediation actions.
• Prepare management reports, summary analyses, and presentations on the risk and controls program.
• Design and deliver controls implementation workshops for control owners.
• Map information security controls to risks in the Archer GRC platform.
• Monitor internal and external risk indicators and feed them into assurance activities.
• Standardise and automate risk and control processes to improve efficiency.
• Support strategic projects as a subject‑matter expert for the Information Security Governance team.

Required profile

• Bachelor's degree in Computer Science, Management Information Systems or a related field, or equivalent experience.
• 5+ years of hands‑on experience with security controls design, implementation, and evaluation.
• Proven experience with GRC tools, preferably Archer.
• Strong understanding of industry best practices and regulatory requirements.

Required skills

• Archer GRC platform
• Security control design and implementation
• Risk management frameworks

What we offer

• Hybrid work model
• Full‑time regular employment
• Opportunity to work within a global data and technology leader