Information Security Manager

Description
Are you a seasoned Information Security professional with in depth knowledge of ISO27001? Do you want to work for a VC-Backed organisation on a path to become a leader in their field? We are working with an exciting Cyber Security technology business looking for an Information Security Manager to build and maintain their Information Security Management System and help to implement security best practice across the business.

This role would suit an Information Security Manager or Senior Consultant who have experience leading Security strategy and influencing key decision makers.

Job Responsibilities for the Information Security Manager
 
  • Manage the ongoing development of the company’s Information Security Management System (ISMS) to achieve & retain ISO27001 Certification
  • Continuously improve information security policies, procedures and plans
  • Ensure compliance with all applicable security, data privacy & protection standards and regulations (eg. GDPR)
  • Provide information security guidance to all staff, and implement training, education and awareness initiatives to improve the information security culture of the company
  • Chair the Information Security Forum & Vulnerability Risk Assessment Committee
  • Support Engineering team with advisory and implementation of best practice SSDLC processes
  • Work with all departments to assess new internal projects, provide recommendations regarding their risks and appropriate controls, and support implementation as needed.
  • Undertake risk assessments of 3rd party suppliers to ensure their security meets expectations and engage with them to make proportionate improvements when required
  • Manage information security incidents, working with technical teams and communicating to stakeholders to ensure successful responses
  • Perform and scope security assessments and compliance audits across the company and our suppliers to ensure information security continues to be effective and suitable for the business
  • Provide technical oversight of all security tooling and infrastructure in use; make recommendations on configuration and implementation improvements
 
 
Desirable Skills & Experience for the Information Security Manager
 
Experience:
  • Working in a fast-paced professional company, supporting and prioritizing multiple projects
  • Working in or closely with a technology business with a software development function
  • Working on securing SaaS cloud products hosting sensitive customer data
  • Working in modern businesses with outsourced SaaS-based IT infrastructure and remote working
  • Implementing and maintaining ISO27001 standard
 
Knowledge:
Required:
  • Strong knowledge of the principles of risk management
  • In depth understanding of how to deliver an effective ISMS - in particular ISO27001
  • Familiarity with technical security concepts to assess risks, recommend appropriate controls and obtain assurance of control design and operating effectiveness
  • Strong understanding of data privacy & protection legislation and applicability
  • Establishing SSDLC processes and secure production environments
  • Selecting appropriate security technology and vendor negotiation
 
Desirable:
  • Maintaining the security of a cloud product, leveraging AWS security controls
  • Detailed knowledge of networking technologies and technical security controls
  • Leveraging O365 native security
 
Qualifications:
Desirable:
  • Information security professional qualification such as CISSP, CISA. CISM
  • Certified ISO27001 qualification (Implementor / Auditor)
Apply Later
Sign in
Register
Apply
Later
Sam Finn
Director
Browse Sam's jobs
Get in touch with Sam
0203 3271996
Similar Jobs
  • Senior Product Manager - Cyber Security
    ,
    Consultancy
    £80,000 - £110,000

    Are you a Technical Product Manager with a passion for Cyber Security? Are you looking to work for a globally for an organisation developing some of the most exciting products in the Cyber Security & Cryptography space? I am currently working with a cutting-edge software organisation looking for...
Email Me Jobs Like This
Subscribed to similar jobs notifications

Contact

 

Via resource Group
Kemp House
160 City Road
London
EC1V 2NX
United Kingdom

+44 0203 327 1996

Our partners

REC Logo 2 cyber essential logo2 Crown Commercial Service G Cloud 8

We use cookies to provide you with the best possible browsing experience on our website. You can find out more below.
Cookies are small text files that can be used by websites to make a user's experience more efficient. The law states that we can store cookies on your device if they are strictly necessary for the operation of this site. For all other types of cookies we need your permission. This site uses different types of cookies. Some cookies are placed by third party services that appear on our pages.
+Necessary
Necessary cookies help make a website usable by enabling basic functions like page navigation and access to secure areas of the website. The website cannot function properly without these cookies.
ResolutionUsed to ensure the correct version of the site is displayed to your device.
essential
SessionUsed to track your user session on our website.
essential
+Statistics
Statistic cookies help website owners to understand how visitors interact with websites by collecting and reporting information anonymously.
Google AnalyticsGoogle Analytics is an analytics tool to measure website, app, digital and offline data to gain user insights.
Yes
No

More Details