Senior Information Security GRC

Location: Lisburn, United Kingdom; based at the Lisburn office.

Company

Camlin develops engineering products and services for power, rail, and scientific industries and operates in more than 20 countries.

What you will do

• Manage organisational information security risks and support the delivery of secure services.
• Support internal and external auditors throughout audit activities.
• Maintain the Information Asset Inventory, Risk Register, ISMS policies, procedures, and related trackers.
• Support Information Asset and Risk Owners with periodic reviews.
• Prepare and update information security reports for the Senior Leadership Team.
• Track nonconformities, improvement opportunities, supply-chain records, physical security records, action logs, and project records through to resolution.

Requirements

• Degree in Computer Science, Information Security, or a related field.
• At least 5 years of experience administering an ISMS or working in a similar Information Security, risk, compliance, or corporate governance role.
• Good knowledge and practical experience of security within IT systems.
• Strong written and verbal communication skills, with the ability to adapt communication to different audiences and engage professionally with stakeholders at all levels.
• Good working knowledge of Microsoft Office applications.
• Strong teamwork and problem-solving skills, including effective collaboration across the business.
• Excellent organisational and time-management skills, with the ability to manage competing priorities.

Nice to have

• Knowledge of ISO 27001:2022, GDPR, Cyber Essentials, and Cyber Essentials Plus.
• Experience using GRC tools.
• Experience with supplier and cloud service provider security due diligence.
• Good project management and meeting coordination skills.
• ISO 27001:2022 Lead Implementer and/or Lead Auditor qualification.

Culture & Benefits

• Work as part of a growing Security Team and ISMS Steering Group.
• Collaborate with colleagues across the business while working independently when required.
• Values include teamwork, listening to learn, people development, continuous improvement, and doing the right thing.