My client require an experienced Cyber Security Manager for a 6 month project to improve on dated Cyber infrastructure ,the aim is to get my client above level 3 NIST within 6 months and provide them with a fully secure infrastructure
Candidates must have great Cyber Tech exposure as well as having a background in delivering this project solely before
This role is a mixture of Cyber Policy and Technical based work.
Key Responsibilities
- The role will be responsible for creating, implementing, and measuring the success of my clients IT security posture
- Is responsible for the attainment and adherence to the required IT security standards, as set out by the Head of IT & Digital Transformation. Currently Cyber Essentials + and the NIST CSF
- Has day-to-day responsibility for devising, planning, and coordinating any IT security related updates across all IT assets and services
- Advise and make recommendations on suitable security controls to the Information security committee
- Assess and provide recommendations on requests for deviation to advised base configurations
- Provide a robust technology infrastructure capable of meeting the needs of Jewish Care
- Own, Agree and ensure compliance to IT Security policy, and any related policies
- Provide early insight to external risk landscape and opportunities to improve
- Identify risk to our infrastructure and provide recommendations to mitigate risk
- Prepare reports for Trustees and Internal Audit & Risk Committee
- Support in assessing the compliance of system and software procurement
Candidates much have demonstrable commercial experience in
- IT Audit and benchmarking (NIST or ISO27001)
- Experience leading an organisation through a significant cyber security improvement programme, both people (Training) and process (Technical tools)
- Lead and maintained an IT environment through industry accreditation to CE+
- Proven ability to engage and manage senior stakeholders
- Excellent written and oral communication and presentation skills
- Relevant IT Security experience in social care organisation
- Creating, maintain and test IT BCP and DR plans
- IT Security Frameworks (NIST or ISO27001)
- Control and securing high value or high-risk data such as PII medical data
- Meraki Networking
- Sophos
- KnowB4 or Cyber security training platform management
- Mimecast
- Azure and Azure VPN
- MS InTune
- Qualys or other device monitoring and patch management platform
- PRTG Network Monitoring
*Rates depend on experience and client requirements