Information Security Specialist Lead

Company Description Experian is a global data and technology company, powering opportunities for people and businesses around the world. We operate across a range of markets, from financial services to healthcare, automotive, agribusiness, insurance, and many more. Experian invests in people and new advanced technologies to unlock the power of data. We have an amazing team of 25,200 people in 32 countries. Description Job Description Reporting to the Head of Information Security Policy and Standards, you will lead the identification, documentation, and implementation of the security risk and controls framework across the Enterprise to meet Experian's cybersecurity and risk requirements. The Information Security Specialist Lead will contribute to the team's goals of ensuring a sound security posture by designing and implementing risk-based security controls. You will contribute to the design and operation of best-practice cyber risk management, collaborating with partners across the business. Responsibilities : Lead the security risk and control modularisation strategy, engaging with the Regional BU, centralised security and IT control owners across the Enterprise to populate the controls library. Maintain and update the integrated risk and control framework following information security policies, standards, industry-accepted practice, and regulations. Review and provide expert check and challenge on first-line business units defined control activities, ensuring agreement on the requirements outlined in control standards and goals. Identify, document, and report control activity gaps, and provide remediation recommendations. Compile management reports, summary analysis, and detailed presentations to describe the risk and controls program. Develop and present content for controls implementation workshops with control owners across the Enterprise. Ensure information security controls are aligned and mapped to applicable risks (risk types and risk register entries) in the Archer GRC platform. Monitor and stay informed about internal and external risk indicators that could affect and disrupt Experian and our mission. Provide these risk indicators as inputs to control assurance and other EGSO activities. Contribute to the efficiency of the risk and controls program by standardizing and automating processes, capturing stakeholder feedback to drive improvement, and enhancing the engagement model. Support strategic projects representing the Information Security Governance team and provide subject matter expertise in the controls space. Qualifications Bachelor's degree in computer science, management information systems or relevant field or equivalent demonstrable experience. 5+ years of hands-on controls experience, with security control design, implementation, and evaluation. Experience with GRC tools, such as Archer. Understanding of industry best practices (e.g., NIST, ISO, COBIT, CMMI, OWASP, ITIL) A detailed knowledge of governance, risk, and controls principles. Knowledge of IT technologies and methods to secure them, with a knowledge of Cloud security. A working knowledge of the AWS cloud environment is beneficial. Knowledge of cybersecurity organisation practices, operations, risk management processes, principles, architectural requirements, engineering and threats and vulnerabilities. Industry certifications such as CCSP, CRISC, CISSP, CISM or equivalent experience. Understand and translate technical requirements for non-technical audiences. Knowledge of the financial services industry and its regulations is preferred. Experience using AI to automate processes is desirable. Additional Information Our uniqueness is that we celebrate yours. Experian's people first, inclusive and purpose driven culture is multi award-winning; World's Best Workplaces™ 2025 (Fortune Global Top 25), Great Place To Work™ in 26 countries to name a few. Check out Experian Life on social or explore our Careers Site to understand why. Experian is proud