Cyber Security Operations Manager

About

The Role Team – Information Security Working Pattern - Hybrid – Minimum 2 days per week in the Vitality Stockport Office. Full time, 35 hours per week. We are happy to discuss flexible working!

Top 3 skills needed for this role:

Security Operations Leadership & Incident Response Risk, Governance & Regulatory Compliance Technical Depth in Monitoring & Security Engineering What this role is all about:

You will be joining a vibrant, exciting environment to lead on maturing the cyber security capabilities  are a values-based organisation and our members are at the heart of everything we do.

The primary purpose of the role is to support with the implementation of the Information Security Strategy and protecting Vitality’s and its member’s data.

You will be leading a team of security analysts and a service delivery manager with specific skill sets. This role provides cyber security leadership through risk management, threat monitoring, incident response, resilience planning, training, and CSIRT team  addition to your daily responsibilities, you will be playing a part in the longer-term security goals such as continuous improvement, developing a technology roadmap and steering the future direction of security operations.

Key Actions Leadership and management of the Cyber Security Operations team Conducting cyber security maturity assessments; continuous improvement of existing security controls and assessing new tools/capabilities for recommendation to management

Perform cyber risk assessments; develop reporting metrics to articulate risk posture to Senior Management Be the key contact for, and lead on the management of Cyber Security incidents, performing and co-ordinating forensic investigations; mature the Cyber Incident detection and response capabilities

Engagement with internal stakeholder and external bodies as required, Vendors, forensic partners, regulatory bodies

Threat hunting; monitoring for emerging security threats Ensure compliance with Vitality’s ISMS, Regulatory requirements and Information Security best practice frameworks (e.g. ISO
27001, GDPR, NIST, Cyber Essentials, ITIL) to ensure the Confidentiality, Integrity and Availability of Vitality Information Systems Deliver key Information Security initiatives/projects, in line with Info Sec and Cyber Security strategy and Enterprise Risk Management Framework Responsible for ensuring that Vitality IT assets are adequately protected from Cyber-attacks and malicious insiders

Provide expert professional advice across Vitality on Information and Cyber Security best practice, training, and awareness sessions

What do you need to thrive?

Degree or professional security qualifications and certifications such as MSc, CISSP, CISM, CISA or equivalent

Extensive experience working in Cyber Security with proven leadership skills Excellent verbal and written communication skills; ability to articulate technical knowledge to non-technical audience; production of policy/standards/project documentation

Appropriate level of technical knowledge, hands-on experience of configuring security tools

Demonstrable experience of designing, implementing and managing information security initiatives Sound understanding of security frameworks (e.g. ISO
27001/2, PCI DSS, NIST), Data Protection and regulatory compliance (e.g. FCA, ICO, PRA, GDPR)
So, what’s in it for you?

Bonus Schemes – A bonus that regularly rewards you for your performanceA pension of up to 12%– We will match your contributions up to 6% of your salary

Our award-winning Vitality health insurance – With its own set of rewards and benefits

Life Assurance – Four times annual salary

These are just some of the many perks that we offer! To view the extensive range of benefits we offer, please visit our…