Information Security Manager

This job has now expired please search on the home page to find live IT Jobs.

Information Security Manager / Cyber Security / Risk Management / ISO / Permanent / Banbury / Oxfordshire

My award winning and market leading client is looking for a passionate and experienced Information Security Manager to join their established yet growing IT Team. The Information Security Manager will be based at the headquarters in Banbury, Oxfordshire and will also be required to travel in an ad-hoc basis.

The Information Security Manager will ensure a pragmatic level of information security is delivered globally by balancing the need to protect the organisation with the need to do business. You will work closely with the Head of Information Security, the wider business, the Change team, IT Services and suppliers, to ensure security risks are understood, appropriate controls and policies are deployed, and agreed levels of security are delivered across the group.

Key responsibilities:

*Ensure the team works with internal and external stakeholders to manage security incidents from identification through to conclusion.

*Ensure that security penetration tests are fully managed from scoping, supplier selection through to remediation of findings.

*Liaises closely with project teams, Architects and other relevant parties throughout the project lifecycle, ensuring that the appropriate security resource is involved in projects.

*Works with relevant stakeholders to agree new policies, standards and guidelines which address key risk areas; ensures that existing policies and standards are kept up to date.

*Works closely with the Head of Security to drive forward the security strategy and roadmap; suggests risk-driven controls and technologies as part of continual improvement.

*As required, works with external and internal auditors to demonstrate controls in systems.

*People-focussed leadership of Information Security team.

*Provides proactive security advice, leadership and consultancy to IT and the business, with good practice and risk appetite in mind.

Key skills and experienced required:

*Proven experience (5 years+) of working as Information or Technical Security Manager, ideally in financial services organisations, although experience in other sectors will be considered.

*Very good understanding of technical architecture and security aspects of infrastructure, application, web, and cloud technologies.

*Experience of creating and implementing security standards and security policies.

*Practical approach to improving the quality and attention to security in a fast changing organisation.

*Excellent knowledge of relevant legislation, regulatory compliance, such as GDPR and FCA obligations.

*In depth experience of security frameworks such as ISO 27001/2, NIST, and in particular, the UK Government's Cyber Essentials Scheme.

*Strong people skills with experience of working with internal and external customers and suppliers.

*Proven track record of ensuring that security is suitably incorporated in IT and Business projects.

*Ability to take complicated, technical or logical concepts and translate them into a clear, easy to understand messages.

*Experience of leading a small team.

*Strong problem solving and analytical skills.

*Security Management Certification such as CISSP, CISA or CISM.

This is a great opportunity to join an established, yet growing organisation during an exciting period of change. The salary on offer for this role is £55,000-£60,000 plus an excellent benefits package including bonus scheme, car allowance, private healthcare and generous pension to name a few!

Please apply ASAP to be considered.

Information Security Manager / Cyber Security / Risk Management / ISO / Permanent / Banbury / Oxfordshire

Spring Technology is acting as an Employment Business in relation to this vacancy.

Spring Technology is an Equal Opportunities employer; we welcome applicants from all backgrounds.