Role: IT Information Security Manager
Salary: £65,000 - £75,000 Per Annum, Plus Benefits Package
Location: Hereford with a hybrid working arrangement
Must have:
The right to work in the UK
Full UK driving licence
Be able to gain BPSS (Baseline Personnel Security Standard) clearance
Be able to gain SC (Security Check) clearance as standard along with any specific security clearances that may be requiredOur leading services client requires an accomplished Information Security Manager to be responsible for protecting the Group's data and information systems from cyber threats and unauthorised access.
This includes developing and implementing security policies, assessing risks, providing reports and managing security incidents. You will also oversee security awareness training, security compliance, security accreditation and collaborate with various stakeholders to foster a security-conscious culture.
Key Deliverables:
Align the business' security stance to comply with ISO 27001and Cyber Essentials Plus, or in accordance with the Cyber Assessment Framework
Improve the Cyber Awareness within the company via communications, Cyber Awareness training and monitoring of Staff compliance
Enhance and maintain a high Microsoft 365 secure score by implementing Microsoft advisories
Identify, assess, and mitigate security risks to the organisation's data and infrastructure
Oversee the creation and document management of polices and standards
Complete a full assessment of all third-party applications
Provide regular security reports to the CISO as required
Advise the CISO, IT Team and the wider business on matters relating to cyber securitySkills & Experience:
Solid experience working within a similar role within information security management, ideally within an ICT Infrastructure, Managed Service Provider and/or Systems Integrator
In-depth knowledge of ISO 27001 standards and best practices, as well as other relevant security frameworks (e.g., NIST, CAF)
Strong technical understanding of modern IT and cloud environments, including the ability to assess third-party platforms, suppliers, and software for security risks
Proven experience in developing and implementing information security policies, procedures, and controls.
Familiarity with risk assessment methodologies and tools
Regulated background essential
Experience in managing information security incidents and conducting investigations
Excellent communication and interpersonal skills, with the ability to effectively collaborate with stakeholders at all levels of the organisation
Desirable: Experience of working within Defence, UK government and/or a commercial security supplier
Professional certifications in information security, such as CISSP or CISM, ISO 27001 relatedIf your profile demonstrates strong and recent experience in the above areas - please submit your application ASAP to Jackie Dean at TXP for consideration.
TXP takes great pride in representing socially responsible clients who not only prioritise diversity and inclusion but also actively combat social inequality. Together, we have the power to make a profound impact on fostering a more equitable and inclusive society. By working with us, you become part of a movement dedicated to promoting a diverse and inclusive workforce