Information Security Auditor

Job Description

FARFETCH exists for the love of fashion. Our mission is to be the global platform for luxury fashion, connecting creators, curators and consumers.

We're a positive platform for good, bringing together an incredible creative community made up by our people, our partners and our customers. This community is at the heart of our business success. We welcome differences, empower individuality and celebrate diverse skills and perspectives, creating an inclusive environment for everyone. We are FARFETCH for All.

TECHNOLOGY

We're on a mission to build the technology that powers the global platform for luxury fashion. We operate a modular end-to-end technology platform purpose-built to connect the luxury fashion ecosystem worldwide, addressing complex challenges and enjoying it. We're empowered to break traditions and revolutionise, with the freedom and autonomy to make a difference for our customers all over the world.

LONDON

Our London office is located in Old Street, London's tech hub, and is home to a broad range of teams including Commercial, Marketing, and Product. Our open plan space is ideal for collaborative working and sharing ideas, or you can enjoy some quiet time in our dedicated library. We also have a large outdoor terrace which is the perfect spot to have a team lunch or host events.

THE ROLE

As an Information Security Auditor you will be part of our Security team at Farfetch and have the opportunity to grow while sharing your skills and knowledge with the whole company.

WHAT YOU'LL DO

• Recommend and implement changes to enhance systems security and prevent unauthorized access;
• Administrate and share security policies and procedures by reviewing and auditing security policies;
• Monitor compliance with legal requirements;
• Perform risk assessments and other security reviews as required;
• Help maintaining information security policies and coordinate company-wide information security controls to protect the integrity of Farfetch's assets.
• Create information relating to ISMS process, procedures, standards and coaching / awareness training to staff.

WHO YOU ARE

• Degree in Computer Science or higher in an Information Security field
• You will report to Information Security Risk Officer
• Background in software development or systems administration
• More than 4 years in a similar position
• Good understanding of network protocols, design and operations
• Working knowledge of Security principles, techniques and technologies
• Certifications on Information Security (CISSP, CISA, CEH or similar)
• Working knowledge of COBIT and ISO 27001, policy and procedure review and document management, gap analysis
• Good understanding of risk-assessment methodologies (OCTAVE, NIST SP 800-30)
• Experience in Data Privacy impact assessment is a plus.