{bc}
Apply
oracle

Regional Information Security Officer (RISO) – UK & South Africa

WSP USA Inc.
GBR
Full-time
Senior · 8+ years experience
Onsite
Discovered 3 weeks ago

Full Job Posting

Requirements:

  • Required
  • 8+ years related senior level experience in Information Security, IT risk, IT Audit or a similar position involving IT and business change
  • Graduate of a four-year college or university, preferably with a degree in computer science or information management
  • Professional certification in one or more of the following disciplines — IT governance (e.g., CGEIT), security (e.g., CISSP, CISM), internal audit (CISA) or Payment Card Industry (PCI)
  • Working (not necessarily technical) knowledge of security technologies (encryption, data protection, network intrusion prevention, host intrusion prevention, firewalls, privilege access, etc.)
  • Working (not necessarily technical) knowledge of enterprise IT security concerns and technologies, including but not limited to VPNs, network security, encryption, authentication, application-level network protocols, PKI, IPSec, Firewall, SSH, SSL, DES, LAN/WAN, and TCP/IP
  • Imagine a better future for you and a better future for us all. Work on landmark projects around the world and embrace opportunities to make an even bigger impact in the communities you care about. What if you could do thebest work of your life and create a legacy for yourself? With us, you can. Apply today. #LI-SB1
  • Imagine a better future for you and a better future for us all.
  • Work on landmark projects around the world and embrace opportunities to make an even bigger impact in the communities you care about. What if you could do thebest work of your life and create a legacy for yourself?
  • With us, you can. Apply today. #LI-SB1

Responsibilities

  • Working directly with business leadership within region and at all levels of the organisation to deliver an effective, world class information security program.
  • Establish and maintain the Information Security Governance framework; including running the regional Information Security Committee; coordinating IS risk management, executive reporting and participate in other forums where information security input and approval is required based on documented policies and processes.
  • Implementing and Operating the ISO270001 aligned Data and Information Security Management System in region.
  • Enhancing the security culture within region, driving business change initiatives and owning security e-learning.
  • Developing and maintaining an understanding of regional IS requirements, including client and regulatory/legal requirements. Working with key stakeholders, including the Head of Legal and business leads to provide input and security assurance for new bids and acquisitions.
  • Working with corporate and regional IT teams and providing security guidance for new IT projects in region (working with the Security Architect function where needed)
  • Liaise with the relevant regional functions – Risk Management, Commercial, HR, Legal, Compliance, Procurement, Facilities / Physical Security - to ensure IS coordination and risk management in region.
  • The management and co-ordination of any security incident response within region.
  • Provide SME and guidance to their region on any security needs or requirements. Act as an advisor to their regional ITBP on all information security related matters.
  • Work with the BISO and ISO on the Global Information Security Framework; contributing to the development of new processes, identifying and resolving risks and providing regular reports on security matters and metrics.
  • Displays leadership and independence in performing their role, with an ability to make complex decisions with limited input and review from senior staff.
  • High level of personal integrity, and the ability to professionally handle confidential matters and exude the appropriate level of judgment and maturity.
  • Assist in the training, and coaching of new and existing staff, and provide coaching to staff executing all aspects of information security and risk assessment and support. Manage the process of translating into any local languages.
  • Develop positive working relationships with other team members and business partners and partner across teams to align with WSP internal and external client demands
  • Capable of rapidly assimilating and internalizing complex business, technology, and risk management concepts and dependencies
  • Capable of clearly defining, presenting and selling recommended strategies to senior management teams
  • Critical thinker with strong problem-solving skills, project management skills; financial/budget management, scheduling and resource management.
  • Excellent written and verbal communication skills, interpersonal and collaborative skills, and the ability to communicate between specialized groups of business unit and IT professionals
  • Accommodation of schedule for international conference calls
  • Support the BISO / ITBP in developing the budget projections based on objectives

Apply for this job in 1 click

Skip the repetitive application forms

Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.

Sarah M.James T.Maya R.

Trusted by over 500,000 job seekers on Base Career

Start Free Today

More from this employer

More jobs at WSP USA Inc.

System Operator II - Traffic Operations

Hauppauge, USA

Discovered TodayFull-time

Project Controls Lead – Reporting & Automation

Vancouver, USA

Discovered TodayFull-time

Data Center Project Manager, Consultant

New Orleans, USA

Discovered TodayFull-time

SUE Tech II

Altamonte Springs, USA

Discovered TodayFull-time

Plumbing Engineer - Buildings

Dallas, USA

Discovered TodayFull-time

Project Manager, Power Delivery (Data Centres)

Toronto, CAN

Discovered TodayFull-time

On-call Senior Hydrogeologist

Shelton, USA

Discovered TodayPart-time

Construction Inspector

Raleigh, USA

Discovered TodayFull-time