Purpose:

Overall responsibility for monitoring, managing and developing IT Security Controls for Brightwell to ensure Brightwell adheres to it stated IT policies, procedures and controls.

Main Tasks and Responsibilities:

• Review and develop in-house policies and procedures

• Review of existing controls

• Manage required monthly\quarterly\annual controls and ensure adherence to control definitions

• Work closely with Senior Information Security Manager and the Head of Investment Systems and IT Infrastructure to agree new controls and ensure existing controls are being followed

• Interacting with vendors on a day-to-day basis to controls are aligned and accurate and timely deliverables for audits are provided

• Work with Internal and external auditors to provide required evidence to support the audits

• Ensure documentation is produced, controlled and filed correctly to meet audit requirements.

• Define, document and implement control improvements.

• Review of internal controls against regulatory requirements such as the FCA and The Pensions Regulator

• Work closely with Risk and Compliance to assist with the implementation and adherence of ISO27001

• Assist with the implementation of new Security tooling to help automate and manage controls
• Work with staff at other Brightwell Group offices to ensure alignment of IT controls and tooling

This role is critical to BTPSM successfully managing and developing the required control process enabling the completion of IT audits within a timely manor

• Applying knowledge of both business requirements and system capabilities to deliver best practice within controls constraints
• Proactively identifying gaps in existing control and proposing solutions

• Ongoing monitoring of adherence to established IT controls and processes

• Effectively coordinating across different departments and third parties to successfully deliver against audit timescales

• Ensuring all activities are carried out in full compliance of regulatory requirements and internal policies / procedures (inc. the agreed Change Framework)

• Any other ad-hoc duties that may be required to (where appropriate) to ensure team objectives are met.

Person Specification

Essential:

• Experience working in control environments
• Experience of managing and developing IT Policies, procedures and controls Experience of assisting with Internal/External Audits
• Solid Microsoft office skills (MS Project, Excel, PowerPoint and Visio).
• Experience in managing 3rd party suppliers to implement controls and object documented evidence

Desirable:

• Information Security Training such as CISM
• Familiarisation of IT control frameworks such as ISO27001 or Cyber Essentials +
• Familiarity with Azure DevOps
• Worked in Investment management industry or alternatively experience gained within an administrative operational environment in a regulated industry
• Ability to manage and understand a variety of complex tasks in a highly dynamic environment.
• Be adaptable and comfortable operating in an ever changing environment
• Strong organisational, analytical and problem-solving skills.
• Effective communication skills with the ability to build effective stakeholder and business relationships,
• Ability to draft and present documentation in a clear and concise manner and adapt to various target audiences.
• Excellent attention to detail

A positive, professional and “can-do” attitude