IT Security Manager

My client is looking for an experienced IT Security Manager to lead their platform security team and ensure the security and integrity of their systems. This role provides strategic oversight of security operations, manages relationships with key vendors, and ensures compliance with security metrics. You will work closely with the CISO to shape and implement security strategies aligned with business goals.

Leadership & Strategy:

•  Lead and mentor the platform security team, fostering a culture of security excellence  
• - Develop and implement a comprehensive platform security strategy aligned with business objectives  
• - Provide strategic oversight for platform security initiatives

Vendor & Stakeholder Management:

• Manage relationships with security vendors, ensuring all alerts are reviewed and appropriate actions taken  
• Oversee the Security Operations Centre (SOC) and ensure timely response to incidents  
• Collaborate with internal teams and stakeholders to ensure comprehensive security coverage across the organisation

Vulnerability Management:

• Oversee vulnerability management, ensuring timely remediation by relevant teams
• Lead remediation efforts for vulnerabilities identified through penetration testing

Reporting & Compliance:

• Report on security metrics to Governance, Risk, and Compliance (GRC) teams, focusing on Key Risk Indicators (KRIs) and Key Performance Indicators (KPIs)  
• Ensure compliance with all relevant security standards and regulations

Security Controls

• Own and manage key security controls, including File Integrity Monitoring (FIM), Web Application Firewalls (WAF), Distributed Denial of Service (DDoS) protection, and Data Loss Prevention (DLP)  
• Continuously assess and improve security controls to address evolving threats

• Expertise with security tools, such as Threat Intelligence (e.g., Rapid7) and vulnerability management (e.g., Tenable.io)  
• In-depth knowledge of SOC operations and incident response  
• Experience with security controls, including FIM, WAF (Cloudflare), DDoS protection, and DLP  
• Excellent communication, reporting, and documentation skills  
• A proactive, detail-oriented approach with strong leadership capabilities  
• Strategic thinking with a forward-looking mindset to drive security initiatives

• Hybrid Working
• Bonus
• Healthcare