Group Information Security Manager - Bracknell/Reading area

Group Information Security Manager

£80,000 plus car allowance & bonus/benefits - Bracknell/Reading area - 3 days in the office (Mon, Weds, Thurs) - 2 days from home.

An international leader in advanced technology solutions seek an experienced Information Security Manager to support and develop the Group's cyber security, governance, compliance and risk management activities across Europe.

Notes:

• Standalone role - not managing a team.
• Preference for small company.
• Experience of ISO27001 and cyber essentials.

Key aspects of the Information Security Manager role:

• Support the development and implementation of the Group-wide IT Security and Cyber Security strategy aligned with the Group's strategic goals.
• Promote and support a strong security-aware culture across the Group.
• Establish and maintain Group-wide IT security policies, standards and governance frameworks.
• Identify and implement security solutions aligned to business requirements and operational risks.
• Standardise security governance, incident response, access management and compliance reporting across the Group.
• Ensure business systems, infrastructure, cloud platforms and data are protected against evolving cyber threats.

Information Security Manager Role Summary:

Support and develop the Group's cyber security, governance, compliance and risk management activities across Europe.

Drive a security-first culture while supporting operational and commercial business objectives.

Oversee external security partners, evaluate cyber risks and strengthen the Group's security posture.

Work to support regular supplier & partner security compliance audits.

Support compliance initiatives including Cyber Essentials, Cyber Essentials Plus and similar frameworks.

Work to build a fit for purpose IT security budget.

Current Core Applications and Technologies required for the Information Security Manager position:

• Microsoft Azure Information Security Manager.
• Microsoft Intune.
• Okta Identity & Access Management.
• Zscaler Security Platform.
• SentinelOne Endpoint Protection.
• SD-WAN networking technologies.
• Mimecast Email Security & Threat Protection.
• Abnormal AI Security.
• Tenable.
• KnowBe4.

Group Oversight provided by the Information Security Manager position:

• Deliver the Group IT Security and Cyber Security strategy in conjunction with the Group Infrastructure, Support & Security Director.
• Develop and maintain the Group IT Security Risk Register.
• Produce and present security reporting to IT and business leadership.
• Lead annual penetration testing.
• Management of IT Security awareness training platform.
• Lead cyber security risk assessments and remediation planning.
• Conduct security due diligence on acquisitions and support post-acquisition integration activities.
• Support business continuity and disaster recovery planning.

Security Operations & Governance required by the Information Security Manager position:

• Manage incident response, cyber investigations and escalation procedures.
• Maintain IT security policies, procedures and operational standards.
• Maintain operational and strategic cyber risk registers with clear ownership and remediation actions.
• Ensure security monitoring, logging and alerting capabilities are continuously improved (Seim).

Skills & Experience required by the Information Security Manager position:

• Experience defining and implementing IT security policies and governance frameworks.
• Experience supporting Cyber Essentials, Cyber Essentials Plus, ISO27001 or similar frameworks.
• Strong understanding of Microsoft Azure cloud security and governance.
• Experience with Intune, Okta, Zscaler, SentinelOne, Mimecast and SIEM platforms.
• Strong stakeholder engagement and communication skills.
• Real world of cyber security recovery or table to planning.
• Experience managing cybersecurity risk.

Group Information Security Manager

£80,000 plus car allowance & bonus/benefits - Bracknell/Reading area