Information Security Consultant – Salesforce – Banking

Information Security Consultant – Salesforce – Banking

An excellent opportunity opens for an Information Security Consultant to join a major Salesforce transformation within an international bank. This isn’t a traditional advisory role, you will become the directly embedded security SME for the Salesforce delivery team, working alongside architects, developers, product managers and engineers to design secure solutions, solve complex security problems and help teams deliver at pace.

Key responsibilities:

• Problem Solving – You will develop a deep knowledge of your workstreams technology stack and business outcomes allowing you to not only identify security risks but identify and propose practical solutions to the team. This role is all about helping teams deliver securely not just calling out risks.
• Risk and Control Assessments – You will lead risk & control assessments using the Banks defined processes, covering supplier due diligence, privacy impact assessments and project security.
• Risk Management – You will support your workstream identify and articulate risks, steering them towards appropriate treatment plans, documenting mitigating controls and ensuring these are actions within agreed timeframes. You will operate in line with the Bank’s Risk Management framework (including sub-frameworks) and relevant risk and compliance policies and procedures, ensuring appropriate and timely escalation of any concerns to your line manager.
• Advisory – You will provide specialist advice and interpretation of Information Security best practice and UK regulatory requirements to a range of different stakeholders as new products, processes and systems are developed. You will need to be aware of your own knowledge gaps and when & where to seek specialist input to solve a particular problem or query
• Subject Matter Expertise – You will develop a deep knowledge of the Banks secure change processes and procedures, shepherding your workstream through various assessments and approval gates
• Relationship Management – You will build deep, trust based relationships with key stakeholders within your delivery team such as developers, testers, product managers, delivery leads and tech leads. You will be an active member of the delivery team, attending daily stand-ups, PI planning sessions and working groups.

Experience:

• Hold or have the capability to attain appropriate external qualifications, such as Certified Information Systems Security Professional (CISSP).
• You are great at identifying information security risks and you enjoy finding creative solutions problems.
• You have a wide range of information security knowledge and, crucially, you are aware of your own knowledge gaps and able to seek support and guidance as required.
• You understand the intersection of Risk Management and Information Security and how these relate to each other in a Financial Service business (3LoD model).

Information Security InfoSec Info Sec Architect Info Sec Consultant CISSP Salesforce Risk Management Regulatory Compliance Solution Architect Information Security Architect RMF Risk Management Framework Cyber Security Privacy Salesforce Bank Banking Financial Services

#J-18808-Ljbffr…