IT SecOps Manager

Role: IT Sec Ops Manager

Location:

Marylebone Station, London - with travel to other locations on the Chiltern network as required (This role can also be based out of Birmingham or other locations on the network)

Contract Type:
Permanent

Salary:
Up to £79,000 per annum

The IT Information Security Manager will provide day to day management of the technical cyber security environment, SOC and be responsible for information security management. This hands-on role has overall responsibility to ensure appropriate levels of cyber security controls, working alongside other internal teams outside of IT, to ensure ongoing best practice & compliance. This role has one direct report: IT Sec Ops engineer.

• 5+ years exp Cyber Security Manager, Cyber Risk Manager, Cyber Threat Manager, Information Security Manager, IT Security Manager or similar
• Working with the Head of IT to create, maintain, and deliver a robust Cyber Security Roadmap to minimise risk
• Own and maintain all Security related policies and procedures
• Implement “Security by Design”
• Drive a culture of IT & Cyber Security awareness and responsibility
• Develop and maintain the Information Security Strategy
• Conduct ongoing security threat, risk, capability &/or maturity assessments
• Experience & understanding of security legislation, regulatory frameworks, security methodologies & industry standards
• Extensive experience with GDPR and data protection
• Experience setting up and running of SOC services
• Management of a 3rd party SOC
• Experience conducting and responding to Audits
• Experience implementing ISO 27001
• Knowledge of security assessment frameworks (eg threat modelling, controls assessment, risk assessment)
• Responsibility to deal with any security incidents in prompt time frames, overseeing technical solutions to address specific security challenges & mitigation
• Solid understanding of IT infrastructure fundamentals such as networks, operating systems & databases
• Engage & collaborate with third party vendors, to ensure capacity of retained specialist resource eg IT forensic analysis, penetration testing, security auditing etc
• Experience with Rapid 7, Sophos MTR, Solarwinds and SNOW
• Excellent reporting skills
• Other duties and experience including but not restricted to:
  Info Sec Strategy, Vulnerability Management and Pen testing scheduling and remediation, Threat Intelligence, Incident management and playbooks, PCI DSS , NIS, Patch management, Azure / O365

• Professional Security Qualifications - e.g., CISSP, CRISM, CISM Security+ etc
• Significant prior experience in an Information Security role, both from a strategy/framework management level and security controls deployment oversight
• Advanced/expert knowledge of Industry Information Security Standards such as ISO, NIST
• Experience of mapping an organisations current operations vs these standards, analysis of gaps the delivery required to close them
• Willing to travel
• CTC Clearance