Senior Information Asset Security Manager

Role Responsibilities

This role is part of the Trust and Resilience Function led by the Group Chief Information Security Officer ( CISO ). You will be a member of the Information Asset Management team which has been set up to secure the Group s information by enabling the identification, assessment, and prioritisation of the Group s Information Assets.

Your primary responsibilities will be to partner with business stakeholders to assess the business impact of their Information Assets and systems from an Information & Cyber Security ( ICS ) perspective. Your responsibilities will include:

Information Assets and Business Impact Assessment
• Management of the Group s Information Asset registry framework including working with stakeholders to identify and assess their critical information.
• Provide expert review and challenge of the security business impact assessments submitted by Information Asset/System Owners to ensure accurate assessment of ICS impact.
• Review the mapping of information assets and systems to identify concentrations of ICS risks and subsequently recommend changes to impact ratings.
• Review the overall distribution of impact assessments to allow for effective prioritisation of Information Assets and Systems.
• Review assessment process control metrics. Take actions to remediate overdue assessments and escalate process control issues.
• Make recommendations for the continuous improvement of the security business impact assessment process.

Business Partnership
• Provide expert advice and assistance to business end users on the process, methodology, and systems used to calculate the security business impact assessment.
• Lead the development and maintenance of training materials to support business stakeholders.
• Deliver training to business stakeholders on security impact assessment covering ICS fundamentals and system functionality.
• Provide responsive customer focussed support for business stakeholders carrying out the assessment.

Information Asset Assessment System Maintenance
• Day to day management of the Information Asset Security Assessment system.
• Raise and track system issues and their resolution by development teams.
• Perform the role of super user of the Information Asset Security Assessment system.
• Review, manage, and control data quality.
• Engage in the review of developments to the Information Asset Security Assessment system and perform system User Acceptance Testing as required.

Management Information and Reporting
• Lead the development of insightful Management information for senior executives and operational stakeholders.
• Provide commentary and explanation for periodic variance.
• Produce ad hoc reports