Information Security Lead (Cloud)

Information Security Lead (Cloud)

Hybrid/Umbrella contract

Our retail client are looking for an Infosec Lead to join them on a 6 month contract basis.

If you're passionate about information security and if you want to make a real difference at the UK's largest co-owned retailer, then this role is for you.

What you'll be doing:

As an Information Security Lead, you'll be allocated to complex pieces of work and projects, with a particular focus on cloud technologies, where in-depth security knowledge and the ability to apply this to varied scenarios is essential.

You'll work closely with stakeholders to provide guidance on the appropriate information security controls and will assess a variety of information security risks, using industry standard tools and techniques, such as the ISF Standard of Good Practice, IRAM2 and the STRIDE framework for threat modelling.

You'll be able to accurately identify areas of risk that require escalation and will proactively suggest improvements or new features when opportunities arise. You'll be actively encouraged to identify new ways of working and process improvements that will support the Secure by Design service in delivering the best outcomes possible.

You'll also work closely with the Secure by Design manager and support the team in meeting KPI's and managing workloads, projects, and resource allocation across the team.

What you'll have:

• Hands-on experience in a role directly relevant to Information Security governance, risk and controls.
• Experience of assessing information security risk in a cloud environment and expertise across a

variety of cloud security controls.

• Experience in the use of security frameworks and the application of these through policies and standards.

• Experience of stakeholder management, working with individuals from both IT and business functions.

What else you could bring:

Experience of threat modelling, using a framework such as STRIDE or similar.

• Formal accreditation in Information Security such as a related degree, ISC2 CISSP, ISC2 Certified

Cloud Security Professional or similar. Management reporting experience.

We are an equal opportunities employer and welcome applications from all suitably qualified persons regardless of their race, sex, disability, religion/belief, sexual orientation, gender reassignment, marriage and civil partnerships, pregnancy or maternity or age