Pinnacle Group are looking to recruit a dedicated Security Assurance Auditor to establishes the requirement for assurance evidence from outsourced delivery partners and communicates assurance requirements to stakeholders. Your role will involve entail performing controls testing, technical assessments and assurance of the Pinnacle Service Families information systems to the Secure by Design (SbD) Assurance Framework and other MOD and Pinnacle Policies and identify key risk indicators and risk mitigation measures and updates risk treatment plan.
You will be joining our Operational Security team based in Speke. Our Operational Security Team team plays a crucial role as part of Pinnacle Service Families, our largest contract managing 49,000 military family homes on behalf of the Ministry of Defence. As part of the team, you’ll sign up to our mission: To be champions of Service Families, advocating for them in everything we do.
This is a predominantly remote based role wil occassional travel required.
Who We Are
Pinnacle Group is a leading UK private sector provider of housing and neighbourhood services, managing and maintaining communities where people live, learn, work and play.
We’re a people-first organisation with a values driven culture that has remained consistent for thirty years; living through how we treat our employees and our customers.
Who We’re Looking For
We’re looking for someone who, alongside the key criteria below, will sign up to our values of Trust, Respect, Involve, Challenge and Deliver Excellence and will be determined to maintain the confidence of our clients and communities.
Key responsibilities will include:
• Seek specialist guidance from the Operational Security Manager, DIO Assurance specialised practitioners as required
• From analysis of collected information, identify security control weaknesses in processes or areas, and prepare formal reports commenting on the conformity found to exist in the audited part of an IT environment allowing the Operational Security Manager to make key decisions and prepare business cases to maintain contractual compliance with DIO / MOD.
• Work with the Operational Security Manager in the supervision of penetration testing teams to ensure that independent appraisals and tests follow agreed procedure and advise others on the audit process. Evaluate the results against specified objectives.
• Develop policies, standards and procedures for information assurance (in particular, system development and maintenance) to enable effective assessment of risks to information availability, integrity, authentication, and confidentiality.
• Advise IT users on risk reduction, and promote awareness of policies and procedures. Act to ensure that they are aware of obligations such as protecting the secrecy of passwords and account access details.
Key requirements:
• Appropriate Information Security Audit and technical qualification e.g. CISA, CISSP
• Has applied relevant government / defence standards and maintaining a full Accreditation Document Set.
• Has performed assurance audits and controls testing activities on outsourcing partners to regulatory frameworks and / or policies
• Good technical understanding and the aptitude to remain up to date with audit, assurance and information security knowledge and developments. Practical knowledge of the principles of information management.
• Proficient in Information Security compliance practices, and acknowledges the need to maintain a practical and pragmatic approach to standards compliance.
Our Offer
The more diverse our workforce, the better we can adapt to and reflect the needs of our customers.
We welcome applications from all backgrounds – particularly from those who represent the communities we serve including ex-armed forces personnel and their families.
As a colleague, you will become part of an inclusive culture, where you will have the opportunity to achieve your full potential and enhance your career through learning and development.
We offer a wide range of benefits at Pinnacle Group, dependant on your role or business area, these range from additional leave packages to pension plans and discounts at your favourite retailers.
• Maternity/paternity packages
• Flexible Working Arrangements
• Life Assurance
• Enhanced Pension Scheme
• Additional Annual Leave
• Private Medical Insurance
• Cycle to Work Scheme
• Employee Assistance Programme
• Retail Discounts
• Childcare Assistance
• Season Ticket Loans
• Sick Pay Schemes
• Personal Development Plans
• Company Car/Car Allowance
• Electric Vehicle Scheme