Role Overview :

The role holder will be an assistant manager in the Information Risk Assessment team, helping to provide information risk assessments by supporting how the firm identifies and analyses information security threats and risks to client information in projects, initiatives, applications and IT resources, to advise on the controls necessary to keep these risks within agreed limits. The role holder will provide support for the day-to-day service, to support the Information Risk Assessments Manager ensuring risks are identified and are entered into the Information Risk Assessment tool.

Key Activities :

- Conduct Information Security Risk assessments of the technologies used.

- Supplier information risk assessments are completed in line with the inherent risk rating.

- Appropriate information security contractual clauses are used in any formal agreement.

- Provide support to the Information Risk Assessments Manager, working within agreed timescales, and keeping the Information Risk Assessments on track within agreed SLA's with business stakeholders.

Technical Information Risk Assessment :

- Along with other Risk Assessors, responsible for performing risk assessments upon projects, suppliers and hybrid (technology projects with a supplier), managed technology solutions, managing demand and prioritising assessment appropriately.

- Provide guidance towards completing risk assessments.

- Provide consulting advice to CTO's, Technology Engineering and Operations, business service owners and 3rd parties on how best to implement the firm's information security policies.

- Support the firm's mission to build client trust and confidence with regard to information security generally and information risk assessment specifically.

- Stay abreast of industry best practice in relation to information risk assessments.

- Support the delivery of a high-quality and timely information risk assessment service to the firm.

- Promote good information security practices and standards across the firm.

Information Risk Management :

- Proactively foster an environment that drives appropriate information risk control behaviour, including early anticipation, identification and mitigation of information risk, as well as escalation of issues in line with the Information Risk Management Framework.

- Support the ongoing development and maintenance of the firm's Information Risk Management Framework, including its supporting methodologies, processes and artefacts.

Co-ordination :

- Working with Project Team and requestors to ensure the accuracy of Risk Assessment forms, managing expectations, clarifying timelines and obtaining artefacts for the Risk Assessment Process.

- Ensure teams understand the Information Risk Assessment process and manage the process for specific assessments.

- Support the Information Risk Assessment team with other ad hoc work as required.

Awareness and collaboration :

- Establish strong relationships with business, functional teams and other relevant stakeholders.

- Build on and preserve the firm's reputation with third-party suppliers around information security.