Information Security Specialist/GRC Specialist

Join us today and make a difference in people's lives!
 

LivaNova is a global medical technology company built on nearly five decades of experience and a relentless commitment to improving the lives of patients around the world. Our advanced technologies and breakthrough treatments provide meaningful solutions for the benefit of patients, healthcare professionals, and healthcare systems.  The company is listed on the NASDAQ stock exchange under the ticker symbol “ LIVN .”  LivaNova is headquartered in London (UK) with a presence in over 100 countries and a team of more than 3,000 employees worldwide.

The Information Security – Specialist will be responsible for identifying, analyzing, and influencing the management of information risks across the organization. These skills and competencies include:

Responsibilities:

• Identifies and facilitates implementation of appropriate controls to effectively manage information risks as needed.

• Performs focused information risk assessments of existing or new services and technologies, along with business counterparts.

• Communicate risk assessment findings to team owners and custodians of information risk business partners, or information governance and information security teams.

• Work with various stakeholders to identify information asset owners to classify data and systems as part of a control framework implementation.

• Lead planning and execution of compliance requirements by evaluating, documenting, and testing internal control systems related to accurate and timely financial reporting (SOX compliance) and liaise with external auditors.

• Identifies opportunities to improve risk posture, developing solutions for remediating or mitigating risks and assessing the residual risk.

• Help provide security communication, awareness, and training for audiences, which may range from senior leaders to field staff.

• Support the promotion activities to build awareness of information Policies, Standards, Processes, and good practices through communication and training for specific audiences such as Information Owners and IT administrators.

• Maintains strong working relationships with individuals and groups involved in managing information risks across the organization.

• Provides consultative advice to information technology, governance or security teams that enables them to suggest informed risk management decisions.

• Develop a strong working relationship with the security engineering team to develop and implement controls and configurations aligned with security policies and legal, regulatory and audit requirements.

• Help support the Information Security Director to manage security projects and provide expert guidance on security matters for IT projects.

• Create and maintain information security management system documentation as needed.

Education, Training and Previous Experience

Candidates will be evaluated primarily on their ability to demonstrate the competencies required to be successful in the role, as described above. For reference, the typical work experience and educational background of candidates in this role are as follows:

• BS in Business, Computer Science, Information Security, or a related field

• 5-7 years of work experience in information security, in an information risk analysis or IT audit role, preferred.

• 5-7 years of experience with information security management frameworks (e.g., International Organization for Standardization ISO/IEC 27001/27002, COBIT, National Institute of Standards and Technology (NIST) 800, COSO) preferred.

• Certification such as Certified Information Systems Security Professional (CISSP) or the Certified Information Systems Auditor (CISA) preferred.

• Strong analytical skills to analyze security requirements and relate them to appropriate security controls.

• Excellent verbal, written and interpersonal communication skills, including the ability to communicate effectively with the IT organization, project and application development teams, management and business personnel; in-depth knowledge and understanding of information risk concepts and principles as a means of relating business needs to security controls; an excellent understanding of information security concepts, protocols, industry best practices and strategies.

• Experience developing and maintaining policies, procedures, standards and