Information Security Risk and Compliance Manager, eMed Healthcare

• Educated to degree level (or equivalent) education, or equivalent work experience
• Relevant compliance or risk management qualification
• Broad industry / technical awareness to be able to identify opportunities for improvement and align risk and control requirements with business needs
• Enthusiasm and willingness to continue to learn and develop
• Governance, Risk and Compliance (GRC) or information security / computer science background
• Demonstrable experience of managing technology compliance requirements, implementation, assessment and auditing Information Security Management Systems in accordance with international / recognised industry best practice standards
• Operational / technology risk management skills and experience
• Strong communication and influencing skills to communicate effectively at all levels, with personal gravitas and ability to effectively influence senior stakeholders
• Effective organisation and project management skills, including business change experience
• Strong management and team leadership skills and experience
• Effective prioritisation, organisation, project management skills
• Quality management skills and experience including document control / document management
• Good commercial awareness

Desirable

• The Technology/Information Security Risk and Compliance Manager is responsible for technology / information security risk management and security compliance management, supporting eMed’s Global Clinical Services / Babylon Healthcare Services Limited’s Information Security Management System (ISMS) is adopted and effectively implemented within the UK
• Technology Risk Management
• Supports the business to Identify, assess and evaluate technology / information security risks in accordance with the Technology Risk Framework
• Collaborates with other roles within the Cyber / Information Security teams to understand current and evolving information security threats and vulnerabilities
• Supports the business in its growth by providing timely risk assessment information, enabling the business to make informed technology risk decisions
• Develops strong working relationships with risk and control owners to ensure that risks are understood
• Supports the business to effectively prioritise technology risk treatment and ensure effective risk action plans are established and implemented within target timeframes
• Facilitates the identification of technology KRIs and KPIs to enable the measurement of risk management performance and control effectiveness
• Collects and validates technology KRI and KPI data and communicates status to relevant stakeholders, including the Integrated Governance Committee
• Manages and tracks non-conformity and risk treatment plans and reports on performance
• Supports the business to comply with technology and information security related legal, regulatory, contractual and business requirements
• Assists in the global development, review and maintenance of global security policies, processes and procedures, identifies and maintains regional policy exceptions
• Manages regional technology risk and compliance processes including regional ISMS programme planning, monitoring and measurement, non-conformity and corrective actions management and continuous improvement processes
• Ensures and maintain continuous compliance, validation and annual assessments to all security standards and requirements including, ISO 27001, Cyber Essentials, SOC 2 Type II, PCI DSS and the NHS DSP toolkit
• Maintains effective relationships with certification bodies and assessors
• Supports and develops a culture of security awareness of employees to ensure security policies are adhered to at all times, incidents and risks are reduced
• Supports commercial teams in responding to RFIs and bids, providing security assessment information
• Supports the technology community to develop, maintain, test and exercise disaster recovery plans, integrating resilience within information governance
• You’ll have a chance to work in a fast-paced environment with experienced industry leaders