Information Security Manager

I am looking for an Information Security Manager to join a great defence organisation based in Wiltshire. You’ll be walking into a strong position, being that there’s already a good setup in place with ongoing upgrades and transformation across the business, especially within IT.

The role responsibilities:

• Own and manage the Information Security requirements and compliance obligations.
• Develop, maintain and deliver the Information Security strategy, plans, policies, processes and best practices.
• Act as subject-matter expert for all Information Security matters, engaging with internal and external stakeholders (including SIRO, MoD security representatives and accreditors).
• Ensure compliance with Security Operating Procedures (SyOps) across all environments, escalating non-compliance where appropriate.
• Manage and maintain appropriate Information Security controls and tooling.
• Define Information Security awareness and training requirements, working with Learning & Development to ensure suitable content and completion.
• Line manage and develop the IT Security Officer, providing guidance, coaching and performance support.

• Strong demonstrable experience of IT and cyber governance, compliance, risk, and security within enterprise IT environments.
• Strong, in-depth understanding of information and cyber security.
• Proven experience defining and delivering Information Security best practice.
• Experience leading Information Security initiatives, including awareness programmes, training and phishing simulations.
• Good technical understanding of information security, including network architecture, SDLC, penetration testing, DLP tools, patching and vulnerability management.
• Working knowledge of National Cyber Security Centre (NCSC) guidance and best practice.
• Understanding of data governance, cyber security and data protection principles.
• Experience working with security audits and assurance activities.
• Strong Microsoft Office skills.
• Full UK driving licence

Desirable:

• At least one of the following, ideally 2 - CISM / CISA / CIPT / ISO27001 Lead Auditor
• Experience working in a MoD restricted environment and knowledge of MoD security standards.
• Familiarity with the NIST/ CSM V4 framework.

• Salary of between 60k- 65k
• 25 days annual leave + bank holidays - additional gained with service
• Hybrid working 2 days just outside of Salisbury per week, ideally
• Up to 8% employer pension contribution
• And more!

Hays Specialist Recruitment Limited acts as an employment agency for permanent recruitment and employment business for the supply of temporary workers. By applying for this job you accept the T&C’s, Privacy Policy and Disclaimers which can be found at (url removed)