Information Governance, Communications, and Policy Specialist at a respected law firm. Responsible for enhancing the firm's Information Security Management System and ensuring compliance with regulations.
Responsibilities
Develop, draft, and maintain internal IT and security policies aligned with ISO27001, GDPR, and other relevant regulatory frameworks.
Collaborate with IT, Risk, and Compliance teams to ensure policies are practical, effective, and accurately reflect operational processes.
Monitor regulatory updates from key bodies, perform gap analysis, and recommend necessary policy improvements to ensure continuous compliance.
Support the end-to-end internal and external audit process for ISO27001, assisting with corrective actions and maintaining all required evidence.
Act as the primary point of contact for responding to client security questionnaires and due diligence requests.
Champion internal security awareness initiatives, including training and communications, to foster a robust security culture.
Ensure all governance documentation is meticulously structured, version-controlled, and audit-ready at all times.
Requirements
A degree in Business, IT, Computing, Law, or a related field.
Progressive experience in a role focused on information governance, compliance, policy management, or IT audit.
A strong understanding of information security frameworks, particularly ISO27001, and the principles of policy and procedure documentation.
Experience within a regulated environment (e.g., financial services, corporate services, iGaming, or law firms) is highly beneficial.
Excellent written and verbal communication skills in English, with the ability to create clear, structured, and polished documentation.
A proactive and detail-oriented mindset with a proven ability to improve processes and documentation frameworks.
Strong collaborative skills with the ability to communicate confidently and effectively with stakeholders at all levels.
Relevant certifications (or progress towards) such as CISA, CISM, CISSP, or CRISC would be considered an asset.
Benefits
Competitive Compensation: You will receive a highly competitive compensation package, which includes a competitive base salary, performance bonuses, and other incentives, all reflective of your experience and contribution.
Work-Life Balance: We value work-life balance and offer flexible working arrangements, recognising that achieving your best in your career requires a healthy balance between work and personal life.
Job title
Information Governance, Communications, Policy Specialist
Sustainability & Risk Intern assisting with ESG regulatory compliance and sustainability data management. Engaging with cross - functional teams in Amsterdam to promote supply chain resilience.
Head of Risk leading Wallee Group’s Risk function in a fast - growing payment company. Driving risk management aligned with business goals and regulatory compliance.
Data Quality Risk Supervisor conducting independent assessments of data quality risk frameworks at the Group. Collaborating with various stakeholders within a hybrid work environment.
Business Unit Risk Liaison strengthening risk management culture across business units at Regions. Collaborating with senior leaders and risk management for identifying and assessing risks.
Model Risk Manager overseeing model risk throughout the lifecycle while ensuring regulatory compliance. Collaborating across departments to manage risks and enhance decision - making in financial services.
Governance & Strategic Alliances Lead for North America & Global Specialty Care compliance at Sanofi. Driving strategic healthcare compliance initiatives and overseeing compliance governance frameworks.
Managing first line risk team for Business Banking SME segment at Absa Bank. Developing risk management plans and ensuring control environment are satisfactory.
Risk Manager in Investment Risk Management department at AIMCo, focusing on public equities and tactical asset allocation strategies. Collaborating with investment teams to provide risk assessments and analysis.
Manager providing strategic insights and innovative solutions for clients at KPMG Consulting. Collaborating with teams on governance and risk management across various industries.