Security Governance Consultant

Job Description

Security Governance Consultant

Location: UK (Travel may be required)

Work Your Way is our approach to flexible working - this is available from day 1 of joining.

Our purpose is to make the world more sustainable by building trust in society through innovation. As a Security Governance Consultant, you will contribute to this by supporting and advancing business objectives aligned to the CISO and Europe information security program.

The Europe CISO Function is responsible for implementing the Europe information security program within the NWE Region to ensure that information assets and associated technology, applications, systems, infrastructure, and processes are adequately protected.

As an integral part of the Europe CISO Function, the Security Governance Shared Service is focused on the governance, management, and compliance of the Information Security policies and standards across Fujitsu Europe.

This role will report into the Head of Security Governance, Europe.

Your role will involve:

1. Planning and conducting internal audits across the region to ensure ISO27001 compliance.
2. Preparing ISMS readiness for external ISO27001 audits, and managing the audit plans.
3. Managing the documents within Europe ISMS (information security policies, standards, and guidelines).
4. Assessing and developing the security controls that form part of the ISMS.
5. Handling security incidents related to Security Governance.
6. Supporting Fujitsu Business Units and Procurement with supply chain security governance assessments.

Your transferable skills and experience:

1. Minimum of three years' experience in an information security role, preferably in security governance or auditing.
2. Experience with the Information Security standards and frameworks, especially ISO27001 but also NIST, Cyber Essentials, CIS Controls.
3. Knowledge of information security relevant legal and regulatory requirements; especially Data Protection Act, GDPR, and NIS Directive.
4. Good broad technical knowledge of IT infrastructure, application, and cloud security concepts.
5. Ability to communicate information security and risk-related concepts to technical and non-technical audiences at various hierarchical levels.

Qualifications:

1. Desirable - One of ISO27001 Lead Implementer or Lead Auditor.
2. Desirable - One of Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), or Certified Information Systems Security Professional (CISSP).
3. Desirable - CISMP, Security+, Certified in Cybersecurity (ISC2).

Please note: It's still worth applying even if you do not meet all the requirements above. We are passionate about investing in you and your career and if you have the transferable skills/background in Information Security this could be the next opportunity for you.

Your benefits:

25 Days annual leave plus public holidays (3 flexible)

Pension - Double matching contributions of up to 10%

Life assurance

Companywide incentive plans

Your choices (Flexible benefits such as increased holidays/ travel/ dental critical illness and more)

Perks at work - employee discounts

Employee assistance programme/ virtual GP

Recruitment process:

The recruitment process consists of two stages of interviews.

We are a Disability Confident Employer and will offer an interview to disabled applicants who meet the minimum/essential criteria for the role. Email EMEIArecruitment@fujitsu.com if you would like to apply through the Disability Confident Interview Scheme.

Achieve together

We are recognised as a responsible and inclusive employer: Not only are we a certified Disability Confident Leader, a Times Top 50 employer for Gender Equality, a Top 75 employer for Social Mobility, accredited with the Living Wage Foundation and a signatory for the Race at Work Charter, but we are also committed to the United Nations standards for LGBTI+ and a Stonewall Top 100 Employer.

We are people centric: Our work environments enable you to Be Completely You. Our active people-led Inclusive Community networks are representative of all aspects of diversity and are instrumental in enabling and supporting our innovative approach to inclusion.

#LifeAtFujitsu