Job Description
Reporting to the Head of Information Security Policy and Standards, you will lead the identification, documentation, and implementation of the security risk and controls framework across the Enterprise to meet Experian's cybersecurity and risk requirements.
The Information Security Specialist Lead will contribute to the team's goals of ensuring a sound security posture by designing and implementing risk-based security controls.
You will contribute to the design and operation of best-practice cyber risk management, collaborating with partners across the business.
Responsibilities:
- Lead the security risk and control modularisation strategy, engaging with the Regional BU, centralised security and IT control owners across the Enterprise to populate the controls library.
- Maintain and update the integrated risk and control framework following information security policies, standards, industry-accepted practice, and regulations.
- Review and provide expert check and challenge on first-line business units defined control activities, ensuring agreement on the requirements outlined in control standards and goals.
- Identify, document, and report control activity gaps, and provide remediation recommendations.
- Compile management reports, summary analysis, and detailed presentations to describe the risk and controls program.
- Develop and present content for controls implementation workshops with control owners across the Enterprise.
- Ensure information security controls are aligned and mapped to applicable risks (risk types and risk register entries) in the Archer GRC platform.
- Monitor and stay informed about internal and external risk indicators that could affect and disrupt Experian and our mission. Provide these risk indicators as inputs to control assurance and other EGSO activities.
- Contribute to the efficiency of the risk and controls program by standardizing and automating processes, capturing stakeholder feedback to drive improvement, and enhancing the engagement model.
- Support strategic projects representing the Information Security Governance team and provide subject matter expertise in the controls space.
- Bachelor's degree in computer science, management information systems or relevant field or equivalent demonstrable experience.
- 5+ years of hands-on controls experience, with security control design, implementation, and evaluation.
- Experience with GRC tools, such as Archer.
- Understanding of industry best practices (e.g., NIST, ISO, COBIT, CMMI, OWASP, ITIL)
- A detailed knowledge of governance, risk, and controls principles.
- Knowledge of IT technologies and methods to secure them, with a knowledge of Cloud security. A working knowledge of the AWS cloud environment is beneficial.
- Knowledge of cybersecurity organisation practices, operations, risk management processes, principles, architectural requirements, engineering and threats and vulnerabilities.
- Industry certifications such as CCSP, CRISC, CISSP, CISM or equivalent experience.
- Understand and translate technical requirements for non-technical audiences.
- Knowledge of the financial services industry and its regulations is preferred.
- Experience using AI to automate processes is desirable.
Our uniqueness is that we celebrate yours. Experian's people first, inclusive and purpose driven culture is multi award-winning; World's Best Workplaces™ 2025 (Fortune Global Top 25), Great Place To Work™ in 26 countries to name a few. Check out Experian Life on social or explore our Careers Site to understand why.
Experian is proud to be an Equal Opportunity Employer for all groups protected under applicable federal, state and local law, including protected veterans and individuals with disabilities. If you have a disability or special need that requires accommodation, please let us know at the earliest opportunity.
Our benefits include: Medical, life and dental insurance, Asociacion Solidarista, International Share Save Plan, Flex Work/Work from home, Paid time off, Annual Performance Bonus, Education Reimbursement, Family Bonding, Bereavement Leave, Referral Program, and more.
#LI-Remote
This is a remote position.
Recruitment Fraud Awareness - Experian's recruitment process is conducted only through authorized channels. Recruitment communications will only be sent from an @experian.com email address.
Experian will never ask candidates to make any payment as part of an application, interview, assessment, onboarding, or recruitment process. To apply for roles or verify opportunities, please visit experian.com/careers.