Information Security Compliance Specialist
Motorola Solutions
- United Kingdom
- Permanent
- Full-time
- Support the implementation of information security policies, procedures, and standards for the Alta Video products and services and ensuring alignment with, corporate policy, industry best practices and regulatory requirements (e.g., SOC 2, ISO 27001, NIST 800-53, GDPR, etc.).
- Manage customer information security due diligence in connection with the sales and post-sales processes for the Alta Video security assessments in coordination with corporate customer due diligence response team and applicable product teams. Serve as liaison to corporate supplier information security and privacy due diligence team to ensure Alta Video’s suppliers adhere to MSI’s supplier information security and data protection requirements.
- Perform compliance assessments to to MSI’s comprehensive information security management policies for the Alta Video products and associated risk assessments including identification, coordination of mitigation of security risks.
- Collaborate with internal stakeholders across various departments to implement security controls and raise awareness of security best practices.
- Monitor and maintain security documentation, including Alta Video specific policies, procedures, and risk assessments.
- Stay up-to-date on evolving security threats, regulations, and industry best practices.
- Support the continuous improvement of the information security program through ongoing monitoring, evaluation, and improvement activities.
- Assist drafting and maintaining “library” responses for customer information security and privacy questionnaires specific to Alta Video products and services
- Drafting and maintaining information security and privacy “whitepapers” and other related documentation specific to Alta Video products and services for use by sales and coordination with marketing teams regarding the same.
- Minimum 3-5 years of experience in information security governance, risk management, and compliance.
- Demonstrated experience with developing and implementing information security policies, procedures, and standards.
- Experience with SOC 2, ISO 27001, NIST 800-53 and GDPR compliance frameworks is highly preferred.
- Strong understanding of security risk management principles and methodologies.
- Excellent communication, collaboration, and interpersonal skills.
- Ability to work independently and as part of a team.
- Proficient in Microsoft Office Suite and security information management tools.
- Experience with security awareness and training programs.
- Experience with GRC (Governance, Risk, and Compliance) tools.
- Certified Information Systems Security Professional (CISSP) or equivalent certification.
- Experience with FedRAMP or similar US Government Programmes
- Competitive salary and bonus schemes.
- Two weeks additional pay per year (holiday bonus).
- 25 days holiday entitlement + bank holidays.
- Attractive defined contribution pension scheme.
- Employee stock purchase plan.
- Flexible working options.
- Private medical care.
- Life assurance.
- Enhanced maternity and paternity pay.
- Career development support and wide ranging learning opportunities.
- Employee health and wellbeing support EAP, wellbeing guidance etc.
- Carbon neutral initiatives/goals.
- Corporate social responsibility initiatives including support for volunteering.
- Well-known companies discount scheme.