Information Security Manager

• Manage and maintain EXA’s information security team and program
• Maintain cybersecurity capabilities, processes, and technologies, continuously improving them as required
• Work with infrastructure and application teams to understand the technology landscape and align it with EXA Infrastructure’s security posture
• Deliver the existing cybersecurity program and present evidence for management awareness and regulatory scrutiny
• Oversee a small team responsible for security monitoring, incident management, and security technology engineering
• Maintain policies securing sensitive data and ensure information security and compliance requirements are met
• Manage outsourced security providers and ensure service quality and effectiveness
• Research new technologies and security vulnerabilities
• Champion cybersecurity risk assessment and risk acceptance across stakeholders, end users, and IT professionals
• Review and align information security risk management and mitigation plans
• Advise management on cybersecurity solutions and technologies to remediate risks
• Review and address cybersecurity incidents and oversee remedial activities
• Support change management by ensuring cybersecurity considerations are incorporated
• Communicate regularly with leaders and employees to ensure IT security policies are deployed, revised, sustained, and effectively overseen

• Knowledge of secured on-premise and public cloud deployments for infrastructure and applications across Azure, GCP, and AWS
• Knowledge of security software and hardware, including Privileged Access Control systems, perimeter security, endpoint security, micro-segmentation, and threat analytics
• Ability to motivate and manage a team of information security staff
• Ability to lead the continuous evolution of the information security vision
• Deep understanding of the security industry in the UK, Europe, and the US
• Ability to build collaborative relationships with enterprise stakeholders
• Ability to create and deliver effective presentations
• Ability to evaluate relative costs and benefits of potential actions
• Ability to influence others to modify opinions, plans, or behaviours
• Ability to communicate complex technical issues to diverse audiences in English
• Strong interpersonal, verbal, and written communication skills in English
• Excellent organisational and multitasking skills
• Ability to manage time effectively and be prompt and punctual
• Experience or knowledge related to ISO
  27001 and SOC2 regulatory, legal, and customer certification requirements

Demonstrates expertise in managing information security programs, ensuring compliance with regulatory standards such as ISO
27001 and SOC2, and leading teams in cybersecurity risk assessment and incident management. Proficient in aligning security strategies with cloud deployments across Azure, GCP, and AWS while fostering collaborative relationships with stakeholders.

• Information Security Management
• Cybersecurity Risk Assessment
• Cloud Security (Azure, GCP, AWS)
• ISO
  27001 and SOC2 Compliance
• Team Leadership and Motivation

• Cybersecurity Program Delivery
• Security Monitoring
• Incident Management
• Threat Analytics
• Privileged Access Control
• Perimeter Security
• Endpoint Security
• Micro-Segmentation
• Security Vulnerability Research
• Risk Management

• Interpersonal Communication
• Organizational Skills
• Multitasking
• Presentation Skills
• Influencing Skills

• ISO
  27001 Certification
• SOC2 Certification

• Cybersecurity
• Information Security
• Compliance
• Security Policies
• UK Security Industry
• European Security Industry
• US Security Industry