Information Security Contractor
Posted
Summary
3-month contract Information Security SME supporting a group-wide program to design data retention/deletion mechanisms and reduce redundant stale data, minimizing GDPR/privacy and security risks, including security reviews of applications. Core work spans ISO 27001/NIST CSF implementation, data compliance (GDPR, CCPA), and cyber security assurance engagements.
Enstar are looking for an Information Security SME/contractor for a 3-month period. The contractor will provide support on an overarching program that aims to design and implement fit-for-purpose retention and deletion mechanisms and enable the reduction of redundant stale data to minimize the potential data privacy and security risks across the Group. Additionally, they will conduct security reviews of our applications to identify any risks of us holding data in contravention of GDPR
- In-depth knowledge and understanding of industry frameworks such as ISO 27001 and NIST CSF. Hands-on experience in implementing these frameworks.
- General knowledge/experience regarding data compliance like CCPA, GDPR, etc
- Familiarity with security frameworks such as NIS Directive, NSCS 10 steps to Cyber Security and the PCI DSS.
- A strong understanding of common security threats, risks and controls.
- Experience in conducting information security and cybersecurity audits.
- Play a lead role in the execution of cyber security assurance engagements.
- Working closely with the related internal and external stakeholders to ensure that the risks and controls are understood, and the requirements are met through the delivery of the engagement.