Hybrid Information Security Manager

at Smartdesc - charity IT specialists

• Job title: Information Security Manager
• Job type: Full Time
• Experience level: Mid level, Senior
• Salary: £70,000 - £80,000 per year
• Degree requirement: Bachelor's Degree
• Location requirements: Hybrid, London, United Kingdom

About the role

• Information Security Manager guiding and supporting customers on security solutions. Collaborating with teams to improve security posture and implement controls.

Responsibilities

• Identifying steps that organisations need to take to improve their security position and supporting them through the process.
• Alignment of good practice frameworks and standards such as Cyber Essentials, NCSC CAF and ISO 27001.
• Ownership or oversight of key Information Security processes and procedures.
• Implementation and ownership of Information Security Risk Management programmes.
• Identifying and managing remediation actions to reduce risks.
• Ownership or oversight of Information Security Policies.
• Development and Implementation of general and role/function specific Information Security Training and Awareness programmes.
• Raising, investigating and managing or supporting IT Security incidents ensuring any necessary follow up actions.
• Providing IT security support to business functions including digital teams, IT infrastructure and IT Service Desk.
• Development and ownership of the Information Security Internal Audit programmes.
• Oversight of rolling programmes of security tests, reviews and audits.
• Writing Information Security reports and delivering the findings to key stakeholders.

Requirements

• Knowledge and experience with technology, security and DP related compliance, legal & regulatory frameworks and standards, including Cyber Essentials, ISO27001, PCI DSS, OWASP, GDPR etc.
• Knowledge and experience of the Microsoft stack. Purview experience is beneficial.
• Ability to demonstrate expert knowledge and understanding of information security good practice.
• Experience in working with technical and non-technical business personnel at various levels, articulating security risks in a manner appropriate to the stakeholders.
• Strong attention to detail.
• Knowledge of Information Security principles and concepts and knowledge of technical security controls.
• A positive can-do attitude and a self-starter who can work under their own initiative.
• Information Security certifications such as CISSP or CISM are beneficial as are Microsoft certifications especially from the SC series such as the SC-400/401.

Benefits

• Gym membership contribution
• Health Cash Plan
• Increased annual leave with length of service
• Free annual leave on your birthday
• Length of service bonus
• Flexible working hours
• Hybrid working
• Free Will Writing service
• Life Insurance
• And much more!