Job Description

IT InfoSec Manager (Information Security, Cyber, ISO 27001)
Hereford
Full–time
PCD310134

Job description

Skills & Experience:
• Solid experience working within a similar role within information security management, ideally within an ICT Infrastructure, Managed Service Provider and/or Systems Integrator
• In-depth knowledge of ISO 27001 standards and best practices, as well as other relevant security frameworks (eg, NIST, CAF)
• Strong technical understanding of modern IT and cloud environments, including the ability to assess third-party platforms, suppliers, and software for security risks
• Proven experience in developing and implementing information security policies, procedures, and controls.
• Familiarity with risk assessment methodologies and tools
• Regulated background essential
• Experience in managing information security incidents and conducting investigations
• Excellent communication and interpersonal skills, with the ability to effectively collaborate with stakeholders at all levels of the organisation
• Desirable: Experience of working within Defence, UK government and/or a commercial security supplier
• Professional certifications in information security, such as CISSP or CISM, ISO 27001 related

Competitive Salary Plus Benefits Package - Please enquire

Location: Hereford with hybrid working options available

Role: IT Information Security Manager

Our leading services client requires an accomplished Information Security Manager to be responsible for protecting the Group's data and information systems from Cyber threats and unauthorised access.

This includes developing and implementing security policies, assessing risks, providing reports and managing security incidents. You will also oversee security awareness training, security compliance, security accreditation and collaborate with various stakeholders to foster a security-conscious culture.

Key Deliverables:
• Align the business' security stance to comply with ISO 27001 and Cyber Essentials Plus, or in accordance with the Cyber Assessment Framework
• Improve the Cyber Awareness within the organisation via communications, Cyber Awareness training and monitoring of Staff compliance
• Enhance and maintain a high a major technology provider 365 secure score by implementing a major technology provider advisories
• Identify, assess, and mitigate security risks to the organisation's data and infrastructure
• Oversee the creation and document management of polices and standards
• Complete a full assessment of all third-party applications
• Provide regular security reports to the CISO as required
• Advise the CISO, IT Team and the wider business on matters relating to cyber security