Information Security Manager

We are seeking a dual expertise professional to manage our information security posture while also providing support for network engineering initiatives assisting the network team. This hybrid role requires a strategic thinker who can design secure architectures, implement defensive controls, support our core network and security infrastructure. This role will report into the Head of IT and will be part of the IT management team.

This role will on occasion be required to deputise for the Head of IT and be on the IT duty manager on call rota.

• Framework Governance:
  Align systems with ISO
  27001, NIST and CBEST frameworks.
• Risk Assessment:
  Review new service implementations both on prem and cloud based and ensure systems and services comply with our security standards.
• Risk Mitigation:
  Conduct regular vulnerability scans and coordinate external penetration testing.
• Incident Response:
  Work with our outsourced partner on the investigation and containment of active security threats.
• Monitoring:
  Work with our outsourced partner to ensure 100% SIEM coverage of all IT assets.
• Compliance & Policy:
  Create, update and enforce corporate information security policies.

• Infrastructure Design:
  Architecture of resilient LAN, WAN and VPN environments.
• Hardware Lifecycle:
  Configure and maintain routers, switches and firewalls.
• Disaster Recovery:
  Maintain automated backup systems and network failover protocols.

• Palo Alto Firewalls – Specialist Level, Architect Level Preferred
• Network Access Control including Cisco ISE, TACACS etc.
• Network Detection and Response
• Network Zero Day (Trellix NX or similar)
• Host Zero Day (Trellix HX or similar)
• Cyber Security Network Control Incident Investigation with the assistance of group cyber security experts – Tier 1, Tier 2 to 3 preferred, using Log Rhythm SIEM a bonus
• Host End Point Protection (Symantec)
• Cisco Network Switches Layer 2 and 3 (Catalyst 9K) – CCNP Level, Expert Level Preferred
• Routing protocol – OSPF (Catalyst 9K) – CCNP Level, Expert Level Preferred
• Cisco Switch Stacking (Cat 9K Switches 9600, 9300. 9200)
• Virtual Routing and Forwarding – (Catalyst 9600)
• High Availability and Disaster Recovery - CCNP Level, Expert Level Preferred
• Vulnerability Management (Scanning for Vulnerabilities and classifying the risk, CIS Benchmark Scanning and compliance) – Using Rapid7
• Knowledge of Penetration Testing, understanding of the types of testing and their advantages and disadvantages
• Security Zone Design and considerations
• Network and Security Architecture Design and Considerations
• Understanding of Information Security (Confidentiality, Integrity, Availability)
• Understanding of MITRE ATT&CK
• Understanding of NIST
• Understanding of SIEM use cases for key controls etc
• Understanding of Risk Management in Cyber Security
• Understanding of SSL Blind spots, what causes them and how to mitigate
• Understanding of Malware/Ransomware and how to mitigate
• Understanding of Penetration testing concepts
• Understanding of White/Black/Grey Box penetration testing.
• Developing Security policies and procedures
• Conducting audits/risk assessments
• Handling crisis situations during security incidents