Information Security Manager

I am looking for an Information Security Manager to join a great defence organisation based in Wiltshire. You’ll be walking into a strong position, being that there’s already a good setup in place with ongoing upgrades and transformation across the business, especially within IT. The role responsibilities:

• Own and manage the Information Security requirements and compliance obligations.
• Develop, maintain and deliver the Information Security strategy, plans, policies, processes and best practices.
• Act as subject-matter expert for all Information Security matters, engaging with internal and external stakeholders (including SIRO, MoD security representatives and accreditors).
• Ensure compliance with Security Operating Procedures (SyOps) across all environments, escalating non-compliance where appropriate.
• Manage and maintain appropriate Information Security controls and tooling.
• Define Information Security awareness and training requirements, working with Learning & Development to ensure suitable content and completion.
• Line manage and develop the IT Security Officer, providing guidance, coaching and performance support.

• Strong demonstrable experience of IT and cyber governance, compliance, risk, and security within enterprise IT environments.
• Strong, in-depth understanding of information and cyber security.
• Proven experience defining and delivering Information Security best practice.
• Experience leading Information Security initiatives, including awareness programmes, training and phishing simulations.
• Good technical understanding of information security, including network architecture, SDLC, penetration testing, DLP tools, patching and vulnerability management.
• Working knowledge of National Cyber Security Centre (NCSC) guidance and best practice.
• Understanding of data governance, cyber security and data protection principles.
• Experience working with security audits and assurance activities.
• Strong Microsoft Office skills.
• Full UK driving licence

Desirable:

• At least one of the following, ideally 2 - CISM / CISA / CIPT / ISO27001 Lead Auditor
• Experience working in a MoD restricted environment and knowledge of MoD security standards.
• Familiarity with the NIST/ CSM V4 framework.

• Salary of between £60k-£65k
• 25 days annual leave + bank holidays - additional gained with service
• Hybrid working 2 days just outside of Salisbury per week, ideally
• Up to 8% employer pension contribution
• And more!