Our client, a prominent player in the Defence & Security sector, is currently seeking an Information Assurance Security Manager for a contract role based in Cheltenham. This position entails working closely with cross-functional teams to bolster information security policies, procedures, and controls. Candidates should have a solid grasp of cybersecurity principles, risk management, and compliance frameworks.
Key Responsibilities:
Policy and Procedure Development
- Develop, implement, and maintain information assurance policies, standards, and procedures.
- Ensure compliance with relevant regulatory requirements and industry best practices.
Risk Management
- Conduct regular risk assessments to identify, assess, and prioritise security risks.
- Develop and execute risk mitigation strategies to address identified vulnerabilities.
Security Infrastructure Management
- Oversee the design, implementation, and maintenance of security controls, firewalls, intrusion detection/prevention and notification systems, and other security technologies to meet user requirements and standards of the National Technical Authority.
- Collaborate with IT teams to ensure the security of network infrastructure, servers, and endpoints.
Incident Response and Investigation
- Develop and maintain an incident response plan.
- Lead and coordinate incident response activities in the event of a security incident during initial implementation, before transitioning to a BAU function.
Security Awareness and Training
- Develop and deliver security awareness programs to educate individuals on information security best practices.
- Conduct training sessions in conjunction with SMEs to ensure vigilant and security-conscious users.
Compliance and Auditing
- Monitor and assess compliance with information security policies and regulatory requirements.
- Coordinate and participate in internal and external security audits.
Collaboration and Communication
- Work collaboratively with other relevant departments.
- Communicate security initiatives, risks, and issues to senior management.
Job Requirements:
- Experience in IT Quality Assurance, Information Security, and Assurance.
- Certified Information Security Manager (CISM) or equivalent qualification.
- ISO 27001 Auditor / Implementer certification is essential.
- Understanding of cybersecurity principles, risk management, compliance frameworks.
- Excellent communication and collaboration skills.
If you are an experienced Information Assurance Security Manager looking for a challenging contractor role, we would love to hear from you. Apply now to join our client's dynamic team in Cheltenham.