Senior Security Engineer InfoSec

Job Description

Senior Security Engineer (InfoSec)Location: London (Hybrid) Package: £Negotiable + Benefits Were changing how we operate with a move to more inhouse and onshore operations, as part of this new project were looking for a Senior Security Engineer to join the team to assist in the development and deployment of our new infrastructure. Youll be key in:* Leading the research and analysis of information security controls within the organisation and of third parties to minimise the associated information security risk* Providing recommendations for communication of identified security risks of new or potential 3rd parties* Building key relationships with operational teams both within the UK and US, across InfoSec, DevOps, GRP Businesses and 3rd party suppliers* Analysing business requirements and translating these into sensible risk mitigating processes* Documenting, tracking and monitor open remediation activities to ensure key risks are addressed timely* Managing, supporting and responding to escalated cases inline with Service Level Agreements* Actively participating in cross-group working parties to minimise and mitigate risksThe Rewards:A highly competitive basic salary, coupled with all the normal benefits (Pension, DIS, PMI - Post probation, Holidays)An evolving and proactive environment where everyone is pulling in the same direction The opportunity to join at the outset of a major project and be involved in the development, role out and ultimately the BAU of it over the next 12 months. About you:* Youll be an Expert in information security with working knowledge and experience in working across all areas of it including Legal and Regulatory requirements, Risk Management, Enterprise level architecture, Assessment and Authorisation processes.* Able to interrogate multiple data sources and streams to ascertain risk levels across all platforms - with strong digital and systems leaning.* Demonstratable knowledge of the regulatory environment (FCA/PRA/ICO) and its own unique requirements.* Able to understand, review and improve Service and Organisational Control (SOC) reports.* Working knowledge and experience with controls related to GDPR, NIS, ITIL, COBIT, HITRUST, SOX, PCI, HIPAA and other relevant regulations* CISM / CISSP Qualified (or Equivalent)* Experience of working within an Azure based environment* Exposure to / hands on knowledge of relevant software and platforms (Cloudflare experience is desirable)* Your wider skill set should include strong technical, collaboration, communication and troubleshooting skillsAbout us:The GRP Group (Now part of Brown & Brown Inc.) aims to be one of the UKs leading insurance intermediaries delivering the best outcomes to clients, insurers and our people. We acquire and develop businesses with the velocity of a start-up with a focused,straight talking, professional and accountable leadership who put the customer first and act with integrity and pride in what we do and meet our compliance responsibilities. We expect the same from everyone we hire. With a federated group of businesses, wecan offer a diversity of experience and with our overarching mission we can ensure the success of our people and business.

Keyskills :
ITILData SecurityInformation SecuritySOXAzureSarbanes OxleyCloudflareGDPR