Information Security Specialist Lead

About the role

Reporting to the Head of Information Security Policy and Standards, the Information Security Specialist Lead leads the identification, documentation and implementation of the security risk and controls framework across the Enterprise, meeting Experian's cybersecurity and risk requirements. The role contributes to a sound security posture by designing and implementing risk-based security controls and collaborating with partners across the business on cyber risk management. It is a remote position.

Key responsibilities

• Lead the security risk and control modularisation strategy, working with regional business units, centralised security and IT control owners to populate the controls library.
• Maintain and update the integrated risk and control framework in line with policies, standards, industry practice and regulations.
• Review and challenge first-line business unit control activities, identify gaps and recommend remediation.
• Compile management reports, summaries and presentations on the risk and controls program.
• Develop and present content for controls implementation workshops with control owners.
• Map controls to risks in the Archer GRC platform and monitor internal and external risk indicators.
• Standardise and automate processes, capture stakeholder feedback and support strategic projects of the Information Security Governance team.

Required profile

• Bachelor's degree in computer science, management information systems or a relevant field, or equivalent experience.
• 5+ years of hands-on controls experience, including design, implementation and evaluation of security controls.
• Knowledge of cybersecurity organisation practices, risk management processes, architecture, engineering and threats and vulnerabilities.
• Ability to translate technical requirements for non-technical audiences.
• Preferred: knowledge of financial services regulations, experience using AI to automate processes, and certifications such as CCSP, CRISC, CISSP or CISM.

Required skills

• Experience with GRC tools such as Archer.
• Understanding of NIST, ISO, COBIT, CMMI, OWASP and ITIL.
• Detailed knowledge of governance, risk and controls principles.
• Knowledge of IT security methods and cloud security; a working knowledge of AWS is beneficial.

What we offer

• Medical, life and dental insurance, share save plan, flex work and paid time off.
• Annual performance bonus, education reimbursement, family bonding and bereavement leave.
• Referral program and a referral bonus.