Information Security Manager

Information Security Manager
A boutique cyber security consultancy specialising in Operational Tech, Pen Testing, SOC and GRC solutions, are looking for a Security Consultant to join their team. This is ideal for someone with a strong understanding of GRC processes particularly in compliance frameworks, coming from a technical background. A strong opportunity for someone with broad technical and non-technical cyber experience looking for career progression in a dynamic security consultancy.

RESPONSIBILITIES OF A INFORMATION SECURITY MANAGER:

• Report directly into the CISO, supporting all information security management policies and frameworks
• Review all current processes such as ISO27001, PCI DSS and NIIST
• Implement processes such as ISO27001, PCI DSS and NIIST
• Work across all business areas to assess information security risk exposure with technical and non-technical teams, such as the infrastructure units
• Support the development and monitoring of GDPR compliance within the organisation
• Conduct and support all external and internal audit requirements according to information security assessments

SKILLS REQUIRED FOR A INFORMATION SECURITY MANAGER:

• Related work experience in third party risk management, compliance, IT risk management, information security management frameworks

• Good understanding of risk management practices and industry regulations e.g. NIST, GDPR, ISO27001, PCIDSS
• Experience working with in a client facing role
• A background in working in network security, security operations or security engineering would be advantageous
• Experience conducting internal and external auditing procedures
• Strong experience in conducting report writing highlighting vulnerabilities to company managers and directors
• Excellent written and verbal communications skills
• CISSP, CISM not essential but highly desirable

BENEFITS OF BEING A INFORMATION SECURITY MANAGER:

• Opportunity to work in with multiple sectors as a consultant
• Exposure to a variety of security postures and controls
• Opportunity to develop with extensive training budget for certifications, courses and seminars