My client is looking for an Information Security Policy Author on an initial 6 month contract, Inside IR35. You will be required to write, maintain and help communicate information security policies and procedures, ensuring data management policy alignment across the business and with emerging information security standards and frameworks adopted by the business. You will also assist IT managers in the technical writing of internal policies and procedures

Responsibilities Include:

- Relationship Management: Collaborate with internal stakeholders to gain an understanding of their department requirements and company-wide procedures and operations relating to information security governance, data quality and data protection that need to be aligned. Identify and action opportunities for policy improvement to ensure information security governance meets the needs of the business whilst continuing to protect it.

- Policy Management: Working with an existing document management team and document architecture, review, edit and revise existing and new guidelines, policies and manuals as necessary.

- Policy Communication and Implementation: Support communication and implementation of published information security policies and proactively identify any barriers to application or compliance.

- Self-Management: Manage self in line with the people management policies, procedures, processes and practices to ensure adherence and to maximise own contribution to business performance.

Experience and Skills Include:

- At least three years of experience of writing information security policies and procedures.
- Excellent knowledge of information security standards and frameworks
- Excellent communication and collaborative working skills to identify business challenges and to bring about business process change.
- Proactive self-starter, self-directed and driven to excellence in all aspects of role
- Decision making skills; creative and persistent problem solver
- Good working knowledge of Microsoft product suite.
- Desirable: Professional security management certification such as CISSP, CISM, CISA, CRISC