Information Security Manager guiding and supporting customers on security solutions. Collaborating with teams to improve security posture and implement controls.
Responsibilities
Identifying steps that organisations need to take to improve their security position and supporting them through the process.
Alignment of good practice frameworks and standards such as Cyber Essentials, NCSC CAF and ISO 27001.
Ownership or oversight of key Information Security processes and procedures.
Implementation and ownership of Information Security Risk Management programmes.
Identifying and managing remediation actions to reduce risks.
Ownership or oversight of Information Security Policies.
Development and Implementation of general and role/function specific Information Security Training and Awareness programmes.
Raising, investigating and managing or supporting IT Security incidents ensuring any necessary follow up actions.
Providing IT security support to business functions including digital teams, IT infrastructure and IT Service Desk.
Development and ownership of the Information Security Internal Audit programmes.
Oversight of rolling programmes of security tests, reviews and audits.
Writing Information Security reports and delivering the findings to key stakeholders.
Requirements
Knowledge and experience with technology, security and DP related compliance, legal & regulatory frameworks and standards, including Cyber Essentials, ISO27001, PCI DSS, OWASP, GDPR etc.
Knowledge and experience of the Microsoft stack. Purview experience is beneficial.
Ability to demonstrate expert knowledge and understanding of information security good practice.
Experience in working with technical and non-technical business personnel at various levels, articulating security risks in a manner appropriate to the stakeholders.
Strong attention to detail.
Knowledge of Information Security principles and concepts and knowledge of technical security controls.
A positive can-do attitude and a self-starter who can work under their own initiative.
Information Security certifications such as CISSP or CISM are beneficial as are Microsoft certifications especially from the SC series such as the SC-400/401.
Security Officer responsible for maintaining a safe environment for clients and employees. Enforcing policies and responding to emergencies at the client's site.
Senior Security Advisor enhancing security measures to align with corporate objectives at Desjardins. Leading development of strategic initiatives and overseeing best practices in security.
Controls Professional assessing internal control frameworks at Barclays, improving control effectiveness and managing risks to ensure compliance with regulations.
Senior Information Security Engineer at Wells Fargo investigating insider threats and strengthening cybersecurity measures. Conducting advanced investigations and collaborating with cyber teams to mitigate risks.
Staff Product Manager overseeing enterprise security product strategy for Tenable. Collaborating with various teams to deliver customer - focused solutions and product features.
Program Security Representative providing multi - discipline security support for Special Access Programs. Ensuring compliance, developing policies, and conducting security assessments in a military context.
Information Systems Security Officer managing operational security posture for information systems at GDIT. Collaborating closely with ISSM and ISO, handling security aspects, and ensuring compliance with security standards.
Senior Cyber Security Project Manager at Airbus Protect managing medium complexity projects in Cyber Security Consulting. Focusing on project leadership and team management in diverse client settings.
Security Architect responsible for designing cloud security architectures for leading brands. Ensuring compliance and guiding incident response strategies in AWS environments.
Senior Security Consultant for ISMS Management at Bundesdruckerei GmbH in Berlin. Responsible for security analysis, management, and advisory roles on cybersecurity issues.