Auditor/Compliance - Information Security ISO 27001
This job does not exist anymore.
Try running a new search or browse our vacancies.
Or fill in the form below to receive job alerts.
Job Type | Permanent Full Time |
Location | Epping |
Area | Essex, England |
Sector | Other |
Salary | £35k per year |
Start Date | |
Advertiser | remoteapi |
Job Ref | COISO - SJC1 |
Job Views | 150 |
- Description
Our large, dynamic expanding client are seeking a Cyber Security Auditor/Compliance Officer to work within their smart modern offices in Epping.
The company offer great career progression opportunities, a competitive salary and excellent benefits.
The primary purpose of this role will be to conduct internal audits relating to the Group’s Information Security Management Systems in line with the internal audit programme. In addition to this, there is a requirement to conduct supplier audits as per the audit programme.
These supplier audits will cover various aspects although the main focus would be on data security. The role is national, requires travel and overnight stays (from time to time) and will help to ensure compliance with international standards and Group policies, procedures and processes.
Key duties of the job
- Plan and complete quality, safety, information security and environmental audits in accordance with audit programmes for each of the Groups sites
- Plan and complete supplier audits in accordance with the audit programme for the Group with an emphasis on data security
- Produce reports in a SMART format for all audits undertaken, identifying:
- Deficiencies and non-compliances
- Root cause analysis
- Corrective action required
- Those responsible
- Achievable target dates for follow-up audits
- Ensure corrective actions are recorded onto the issues register.
- Monitor progress on corrective action issues
- Update the issues register with status updates whenever corrective actions updated / closed
- Assist with the data security aspect of third party due diligence questionnaires
- Review the Information Security Manual and associated documents and suggest amendments and updates as and when required (taking into account business, technological and legislative changes)
* Note in addition to the details listed above may be required to carry out other duties as required by your manager.
If you have the relevant skills and experience for this role please apply.