Information Security Manager contract

This job has now expired please search on the home page to find live IT Jobs.

Safeguards information system assets by identifying and solving potential and actual security problems. Defines operational security standards, plans, protocols and processes.

Key Deliverables

Develops and documents a corporate information security policy that meets the regulatory and business needs of the organisation.

Develops the supporting set of processes and controls to implement and manage the information security policy.

Maintains up-to-date knowledge of the information security industry including awareness of new or revised security solutions, improved security processes and the development of new attacks and threats.

Identifies, assesses and categorises information assets of the organisation, and protects those assets by:

* defining access privileges, control structures, and resources;

* recognising problems by identifying abnormalities and reporting violations;

* implementing security improvements by assessing current situation, evaluating trends and anticipating requirements;

* determining security violations and inefficiencies by conducting periodic audits of controls and of operational activities;

* directing the management of system upgrades by implementing and maintaining security controls;

* keeping management and users informed by designing, preparing and disseminating reports reflecting status;

* working with project and operational colleagues to ensure wide understanding of policies, and monitoring implementation of agreed controls;

* working with the training team to create and maintain an Information Security awareness training program;

* selecting and procuring security solutions or enhancements to existing security solutions to improve overall organisation security;

* working with third party service providers and suppliers to ensure they meet the minimum standards for information security;

* acting as a member of the organisation's Design and Standards Authority to ensure all changes have thorough security risk assessments;

* managing any security incidents and escalations within the organisation.

My client are looking for candidates with the following experience:

- Demonstrable track record of successfully designing and implementing the Information Security universe for clients, ideally within Financial Services

- Able to work at a high level, designing strategic solutions, while also getting involved with the details day-to-day

- Strong planning, management and organisational skills.

- Experience designing and delivering employee security awareness and compliance training.

Desirable

One or more of the following certifications would be desirable:

* GIAC Security Essentials Certification / Security Leadership Certification

* ISACA Certified Information Security Manager

* ITIL v3 Security Management certification.

* Microsoft Certified Systems Engineer: Security

* (ISC)2 SCCP

* (ISC)2 CISSP

* (ISC)2 ISSAP