Information Security Manager with Network Engineering Skills

Our Client is bank based in Central London who are looking to recruit a seasoned professional with at least 7 to 10 years expertise level Information Security coupled with Hands-on Network Engineering., You will ideally have circa 5+ years of work experience with Network Engineering coupled with over 10 years experience with Cisco Systems Products, * Strong skills in Information Security Management and Information Security, with experience defining and enforcing security policies and governance.

• Hands-on expertise with Information Security Management Systems (ISMS), including implementation, maintenance, and audit readiness.
• Proficiency in Cybersecurity and Network Security, covering threat detection, vulnerability management, network hardening, and incident response.
• Demonstrated network engineering experience (e.g., routing, switching, firewalls, VPNs, secure network design).
• Relevant certifications such as CISSP, CISM, CISA, CompTIA Security+, or similar are beneficial.
• Experience with regulatory and compliance frameworks (e.g., ISO 27001, GDPR, NIST) and security best practices.
• Ability to analyze complex technical environments, communicate clearly with both technical and non-technical stakeholders, and document security requirements and processes.
• Bachelor’s degree in computer science, information security, engineering, or a related field, or equivalent professional experience.

Key Networking Skills Required:

Cisco Network Switches Layer 2 and 3 (Catalyst 9K) - CCNP Level, Expert Level Preferred

Routing protocol - OSPF (Catalyst 9K) - CCNP Level, Expert Level Preferred

Cisco Switch Stacking (Cat 9K Switches 9600, 9300. 9200)

Virtual Routing and Forwarding - (Catalyst 9600)

Internetworking Troubleshooting - CCNP Level, Expert Level Preferred

High Availability and Disaster Recovery - CCNP Level, Expert Level Preferred

Security/Cyber Security Skills Required:

Cisco Firepower Firewalls (ASA, FTD) - CCNP Level, Expert Level Preferred

Palo Alto Firewalls - Specialist Level, Architect Level Preferred

Cisco Layer 2 Port Security

Network Access Control including Cisco ISE, TACACS etc

Network Detection and Response

Network Encryption (Site to Site VPN’s)

Cisco Secure Client (ASA)

Network IPS (Trellix)

Network Zero Day (Trellix NX or similar)

Host Zero Day (Trellix HX or similar)

Cyber Security Network Control Incident Investigation with the assistance of group cyber security experts - Tier 1, Tier 2 to 3 preferred, using LogRhythm SIEM a bonus

Host End Point Protection (Symantec)

Host IPS

Preferred Skills and Knowledge

Vulnerability Management (Scanning for Vulnerabilities and classifying the risk, CIS Benchmark Scanning and compliance) - Using Rapid7 a bonus

Knowledge of Penetration Testing, understanding of the types of testing and their advantages and disadvantages

Security Zone Design and considerations

Network and Security Architecture Design and Considerations

Understanding of Information Security (Confidentiality, Integrity, Availability), MITRE ATT&CK, NIST, ISO 27001, SIEM use cases for key controls etc

Risk Management in Cyber Security, SSL Blind spots, what causes them and how to mitigate

Malware/Ransomware and how to mitigate along with Penetration testing concepts

Understanding of White/Black/Grey Box penetration testing.

Developing Security policies and procedures and conducting audits/risk assessments

Handling crisis situations during security incidents

The salary for this role will be in the range £85K - £100K + Benefits.

Role Description The Information Security Manager with Network Engineering Skills is a full-time hybrid role based in London, with the flexibility to work from home part of the week. The role oversees the design, implementation, and continuous improvement of information security policies, procedures, and controls across networks and systems. Day-to-day responsibilities include managing the Information Security Management System (ISMS), monitoring cybersecurity and network security events, coordinating incident response, and ensuring compliance with relevant standards and regulations. The person in this role will collaborate with IT and business stakeholders to assess risks, implement technical and procedural safeguards, and support secure network architecture and configuration. Additional tasks include producing security documentation, leading security awareness initiatives, and providing guidance on secure network engineering practices.