Information Security Project Risk Officer

Job description

JOB DESCRIPTION

Summary of Role

With some experience in information security or related roles and a demonstrable interest in security, compliance and risk management, you will support the CISO and Information Security Officers in undertaking activities as part of the global Information Security team.

An understanding of information security best practices and experience in a relevant security role (operations, assurance, risk management or technical) would be beneficial, as would any familiarity with third party security oversight / assurance, or IT principles and techniques appropriate to large enterprises such as IT service delivery, development, networks and systems, data centre operations; cloud services; networking, software development processes, or change management. 

Specifically, this role is required to provide security advice and guidance to projects and change within WTW to ensure that business and technology solutions are secure.

The Role

This role will support the security engagement into projects and change, and will therefore include activities such as:

·  Security review projects to assess their risk
·  Agree appropriate security controls for projects and assist project teams in delivering these
·  Produce risk statements of the compliance of projects against applicable controls and give approval advice for solutions to go live
·  Produce reports and metrics on the security compliance nature of projects and change activities
·  Reporting and escalating issues as appropriate

The Requirements

Skills:

·  Demonstrable knowledge and understanding of security principles and good practice
·  Appreciation of project delivery methodologies such as Prince2 or PMMI
·  Understanding of IT Security controls and technologies 
·  Experience of working with IT and business functions
·  Experience of working with a high degree of autonomy, managing own workload and delivering to tight timescales.
·  Experience of working in a regulated environment, not necessarily insurance or financial services.
Qualifications:

• Information security qualifications (e.g. CISSP, CISM) are preferable

The Company

Willis Towers Watson is a leading global advisory, broking and solutions company that helps clients around the world turn risk into a path for growth. With roots dating to 1828, Willis Towers Watson has 40,000 employees serving more than 140 countries. We design and deliver solutions that manage risk, optimize benefits, cultivate talent, and expand the power of capital to protect and strengthen institutions and individuals. Our unique perspective allows us to see the critical intersections between talent, assets and ideas – the dynamic formula that drives business performance. Together, we unlock potential. Learn more atwillistowerswatson.com .

Willis Towers Watson is an equal opportunity employer

Willis Towers Watson believes that effectively managing a diverse workforce is vital to our business strategy. We have an obligation to our organization, ourselves and our clients to hire and develop the best people we can find. We will continually review our policies and practices to ensure that all areas of the employment process (including recruiting, hiring, work assignments, compensation, benefits, promotions, transfers, company-sponsored development programs and overall workplace experience) are free from discriminatory practices. We are committed to equal employment opportunities at Willis Towers Watson.

Unsolicited Contact: Any unsolicited resumes/candidate profiles submitted through our web site or to personal e-mail accounts of employees of Willis Towers Watson are considered property of Willis Towers Watson and are not subject to payment of agency fees. In order to be an authorized Recruitment Agency/Search Firm for Willis Towers Watson, any such agency must have an existing formal written agreement signed by an authorized Willis Towers Watson recruiter and an active working relationship with the organization. Resumes must be submitted according to our candidate submission process, which includes being actively engaged on the particular search. Likewise, for our authorized Recruitment Agencies/Search Firms, if the candidate submission process is not followed, no agency fees will be paid by Willis Towers Watson. Willis Towers Watson is an equal opportunity employer.