SC Cleared – Information Security / Cyber Manager
OverviewWe are seeking an experienced Information Security Manager to lead the assurance, performance management, and continuous improvement of our cybersecurity capabilities. The successful candidate will play a critical role inerning service providers, uplifting control maturity, and ensuring our security posture aligns with business objectives, regulatory expectations, and recognised industry frameworks.
Key Responsibilities – Cybersecurityernance & Assurance
1. Oversee performance of third-party service providers through structuredernance forums.
2. Deliver written and verbal updates on cyber risks and strategic priorities to senior stakeholders.
3. Assure evidence and control effectiveness against NIST CSF and ISO 27001.
4. Conduct cybersecurity risk assessments and develop mitigation plans aligned to business objectives.
5. Develop and report cybersecurity performance metrics for senior management.
6. Lead or support security incident response, recovery, and post-incident analysis.
7. Oversee patching, vulnerability management and system hardening processes.
8. Support implementation and assurance of cloud and data security solutions.
Key Responsibilities – Technical Leadership & Expertise
9. Translateplex technical information into clear guidance for senior leaders.
10. Provide insight into IT architecture, hybrid/cloud models, and security methodologies.
11. Advice on security tooling includes Firewalls, IDS/IPS, CDN, Endpoint Protection, SIEM, SOAR, DLP, PKI and cryptography.
12. Provide security guidance for cloud models such as IaaS, PaaS, SaaS, CASB, Zero Trust and micro-segmentation.
13. Demonstrate a strong understanding of IAM including RBAC, ABAC, PAM, provisioning,pliance and SSO.
14. Apply threat-modelling approaches including OWASP, PASTA, STRIDE, MITRE ATT&CK, threat intelligence and threat hunting.
Desirable Experience
15. Design and assure secure network architectures and enterprise security solutions.
16. Designing or assuring SOC operations, including monitoring and response.
17. Overseeing penetration testing, vulnerability assessments and remediation lifecycle.
18. Integrating threat intelligence into operations and strategic planning.
Essential QualificationsCertified Information Security Manager (CISM)Certified Information Systems Security Professional (CISSP)Security ClearanceSecurity Check (SC) Clearance is required. #4762767 - James Francis