Information Security Specialist

About Us:

Our parent company, Telecom Plus, was founded in 1996 and operated from a pub in Henley-on-Thames. But our ambitions didn’t keep us small for long – our business grew fast, and was soon listed on the London Stock Exchange and added to the FTSE 250 Index.

Telecom Plus’s flagship product was the Smart Box: a device that plugged into phone sockets to route calls to networks. Spotting an opportunity to provide a wider range of solutions to homes across the UK, Utility Warehouse was founded in Colindale, North London, in 2002 to bring affordable energy, broadband, and telephone services to customers.

Since then, we’ve launched the UW Foundation, which strives to make positive changes for the environment and local communities. And in March 2024, we reached our milestone target of helping more than one million customers save time and money on their home utility bills.

Job Description:

- As the Information Security Specialist at UW you will have the following responsibilities:

- Third party management, RFCs, due diligence

- User access rights authorisation review

- Data Governance response tasks and data cleansing

- Security Spot Checks

- Report Generation across Information Security areas of responsibility

- Managing External Audit Request Process

- Conducting Internal Audits

- Provide guidance to Business stakeholders around Information Security/GDPR/Data privacy concerns

- Monitoring the adherence to the ISO27001 controls across the organisation, alongside SMETS 2 Audits and evidence collation

- You will be the main point of contact for responding to customer and supplier audits, tracking the results and ensuring any remedial actions are carried out as well as generating management information for various steering level meetings.

- Audits, including adherence to Information Security standards, compliance to GDPR regulations, and reporting on the implementation of technical controls as required.

Required Skills and Experience:

To be successful in this role you’ll need:

- A degree in Information Technology/Computer Information Systems (or equivalent) desirable

- Minimum 5 years experience in relevant field

- Certified Information Systems Auditor (CISA) (or equivalent) desirable

- General and broad IT knowledge across Infrastructure, Development and Service Management

- Software Application and Cloud Security principals and practice

- Broad awareness and interest of Information Security trends.

- A clear understanding of IT audit methodologies

- Experience within an Information Security role, with extensive experience on Information

- Experience of ISO27001 implementation and Auditing

- ISO27001 Lead Auditor Certification

- Use AI tools effectively to enhance productivity and innovation in line with UW's digital strategy

Skills / Competencies:

- Strong attention to detail with an analytical mind and outstanding problem-solving skills.

- The ability to work under pressure in a fast-paced and developing environment