Location
AEGON Lochside Crescent, Edinburgh Park, Edinburgh

Company
AEGON UK

Department
Information Security Office

Closing Date
Wednesday 10 September 2008

Target Salary
Dependent on experience

Brief Description of the Department:

The Information Security Office is part of the AEGON UK risk management function and is responsible for developing, implementing and monitoring all security policies within the organization. Its main responsibilities can be broken down as follows:

• Develop and implement AEGON UK Information Security Policy support infrastructure
• Provide advice on selection, design, implementation and operation of information security controls and information security risk management
• Support business unit compliance with the information security policies and relevant legislation
• Investigate report and where appropriate manage information security events and incidents
• Support international information security initiatives through the AEGON Information Security Common Interest Group (SCOI)
• Report on: extent of compliance, information security risk management; key performance indicators and metrics to: the AEGON UK Chief Risk Officer and AEGON UK Board and Committee Structure.

Responsibilities:

The successful candidate will be involved in a wide range of activities that cover: analysing and assessing the adequacy of information security controls, initiating improvements, provision of advice, administration of security related software, facilities and reporting. This role covers all AEGON UK business units.

Responsibilities Include:

• Carrying out activities to support the Information Security Plan, as directed by the appropriate portfolio manager
• Liaising with staff at all levels, including Information Security Co-ordinators, Security Administration, Service Management, Change, HR, Training, Data Protection, Internal Audit, all business units
• The review of new system developments and business initiatives; making recommendations for inclusion in the projects
• Developing and delivering information security awareness training (Source, CBT, Induction training, face to pace presentations)
• Undertake or facilitate information security risk assessments; produce risk assessment reports
• Undertake third party due diligence assessments; produce reports on due diligence assessments
• Undertake investigations of actual or suspected information security incidents; complete incident reports
• Develop and maintain incident response plans
• Assists with the review and assessment of new information security threats
• Assists with the development of departmental procedures and systems; produce quarterly departmental metrics report
• Gather information from other reporting areas on an on-going basis

Requirements:

Essential:

• degree qualified, or equivalent in any of the following
• Business / business related
• IT
• Systems OR
• experience of, or exposure to Risk and Control Assessments in a business environment
• practical or theoretical knowledge of Information Security, and associated topics
• awareness of controls, with why and how they are applied in a business environment
• knowledge of legislation and regulations relevant to Information Security

Desirable:

• Experience of working in an Information Security or risk related role

Please quote WEB/ISA/DC in all correspondence.

Contact Details:

Danny Caines
HR Resourcing
AEGON UK
AEGON Lochside Crescent
Edinburgh Park
Edinburgh
EH12 9SE

Or email direct to recruitment@aegon.co.uk