Regional Information Security Officer (RISO) – UK & South Africa

Job Description

What if you could shape a career as unique as you?

At WSP, you can always find opportunities to grow and do what matters to you. Make the most of our global reach to discover new challenges and chances to work with diverse, talented individuals who will help you expand your horizons.

WSP’s Information Security Office (ISO) is responsible for the deployment of the information security framework in to both the IT organisation and wider business community. This includes the Governance mechanisms, policies and processes, tools and technologies, and employee training required to protect WSP information and that of our clients.

The role of Regional Information Security Officer is a business facing role, though it may involve some interaction with clients and third parties. The role has a dual reporting relationship to the BISO and to the regional ITBP.

This position requires a senior management professional with relevant experience and a strong working knowledge of IT security, risk management, regulatory compliance, information and public cloud service technology, IT operations management principles, and third-party contract management.

Responsibilities

• Working directly with business leadership within region and at all levels of the organisation to deliver an effective, world class information security program.
• Establish and maintain the Information Security Governance framework; including running the regional Information Security Committee; coordinating IS risk management, executive reporting and participate in other forums where information security input and approval is required based on documented policies and processes.
• Implementing and Operating the ISO270001 aligned Data and Information Security Management System in region.
• Enhancing the security culture within region, driving business change initiatives and owning security e-learning.

Capable of clearly defining, presenting and selling recommended strategies to senior management teams

Critical thinker with strong problem-solving skills, project management skills; financial/budget management, scheduling and resource management.

Excellent written and verbal communication skills, interpersonal and collaborative skills, and the ability to communicate between specialized groups of business unit and IT professionals

Accommodation of schedule for international conference calls

Finance/Budgetary Responsibilities

• Support the BISO / ITBP in developing the budget projections based on objectives
  
  

Requirements

Required

• 8+ years related senior level experience in Information Security, IT risk, IT Audit or a similar position involving IT and business change
• Graduate of a four-year college or university, preferably with a degree in computer science or information management
• Professional certification in one or more of the following disciplines — IT governance (e.g., CGEIT), security (e.g., CISSP, CISM), internal audit (CISA) or Payment Card Industry (PCI)
• Working (not necessarily technical) knowledge of security technologies (encryption, data protection, network intrusion prevention, host intrusion prevention, firewalls, privilege access, etc.)
• Working (not necessarily technical) knowledge of enterprise IT security concerns and technologies, including but not limited to VPNs, network security, encryption, authentication, application-level network protocols, PKI, IPSec, Firewall, SSH, SSL, DES, LAN/WAN, and TCP/IP
  
  

Imagine a better future for you and a better future for us all.

Work on landmark projects around the world and embrace opportunities to make an even bigger impact in the communities you care about. What if you could do the

best work of your life and create a legacy for yourself?

With us, you can. Apply today.