About this role
Security Governance, Assurance & RiskSupport security governance and assurance activities, including monitoring adherence to security policies, standards, and control frameworksPerform and support security risk assessments for projects, platforms, and services, documenting risk, impact, and recommended treatment plansAssist with internal and external audits (e.g. ISO 27001, SOC 2, PCI DSS), including evidence collection, control testing, and remediation trackingSupport control design, implementation, and operational effectiveness testing across security and IT controlsSecurity Metrics & Compliance MonitoringMonitor security metrics, scorecards, and control performance indicators across applicationsIdentify non‑compliance and control failures against defined security standards, policies, and SLAsAnalyse trends and recurring issues to highlight systemic control weaknessesValidate the accuracy and relevance of security metric data before escalation or reportingNon‑Compliance Tracking & RemediationLead the tracking of security non‑conformities, findings, and control gaps identified through metrics and assessmentsVerify that remediation actions are implemented sustainablyEscalate overdue, high‑risk, or stalled remediation following governance expectationsReporting & Stakeholder EngagementPrepare and contribute to security reporting for governance, risk, and assurance forumsProvide clear, risk‑based summaries of security posture, non‑compliance, and remediation statusCollaborate with Risk Management, Internal Audit, and Technology teams to proactively identify emerging risks and compliance gapsYou will be reporting to a Senior Manager
You require 6+ years of experience in an information security, IT risk, compliance, or audit role.
Experience with security and risk frameworks such as ISO 27001, SOC 2, NIST, or similarExperience supporting security audits, assurance, and remediation activitiesFamiliarity with security metrics, control monitoring, and SLA‑based complianceExperience working with application or system owners to improve security issuesKnowledge of cloud, SaaS, or enterprise platformsHands-on experience of security monitoring tools such as Panaseer, Checkmarx, Wiz.ioDesirable Skills & Qualifications
Security or risk‑related certifications e.g. ISO 27001 Lead Implementor/Auditor, CCSK, CySA+, Security+, CISA, CRISC, CISSP (or working towards)Experience in regulated or data‑driven environmentsExposure to privacy, data protection, or third‑party risk management Our uniqueness is that we celebrate yours. Experian's culture and people are important differentiators. We take our people agenda very seriously and focus on what truly matters; DEI, work/life balance, development, authenticity, engagement, collaboration, wellness, reward & recognition, volunteering... the list goes on. Experian's people first approach is award-winning; Great Place To Work™ in 24 countries, FORTUNE Best Companies to work and Glassdoor Best Places to Work (globally 4.4 Stars) to name a few. Check out Experian Life on social or our Careers Site to understand why.
Experian is proud to be an Equal Opportunity and Affirmative Action employer. Innovation is a critical part of Experian's DNA and practices, and our diverse workforce drives our success. Everyone can succeed at Experian and bring their whole self to work, irrespective of their gender, ethnicity, religion, color, sexuality, physical ability or age. If you have a disability or special need that requires accommodation, please let us know at the earliest opportunity.
Experian Careers - Creating a better tomorrow together
Benefits
Experian care for employee's work life balance, health, safety and wellbeing. To support this endeavor, we offer the best family well-being benefits, enhanced medical benefits and paid time off.
#LI-Onsite
Experian Careers - Creating a better tomorrow together
Find out what its like to work for Experian by clicking here