HEAD OF CYBER SECURITY / CYBER SECURITY MANAGER

CYBER SECURITY MANAGER / HEAD OF CYBER SECURITY

Up to £160,000 Basic Salary + Excellent Staff Benefits 

Our Client is an Award Winning Technology Based Organisation with a High Quality International Client Base, now looking for a Head of Cyber Security to be an integral part of their growth and drive forward their own Information / Cyber Security Function

The successful Candidate must have an in depth knowledge of Application Security & Strategy at Design Level with Leadership Experience of Growing Security Engineering Teams.

Key Responsibilities of Cyber Security Manager role:

• Ownership & Accountability for Designing & Implementing Security Framework
• Experience of Application Security
• Identifying Security Risks across Organisation, Recommending Remediations & Working with Risk Committees
• Provide Design Advice on New Systems & Projects to Ensure Information Security Controls & Subsequent Architecture Principles are followed
• Chair Information Security Working Group & Ensure Information Security & Data Protection Issues Followed
• Be Member of Group Risk Committee Championing Information Security & Briefing Committee on Threats & Progress
• Produce Budgets & Business Cases for Investment in Information Security Controls & Capabilities
• Deliver or Commission Programme of Vulnerability Scanning & Penetration Testing
• Co-Ordinate Response to Deal with Critical Vulnerabilities
• Work Closely with Engineering Team across Technology Risk Identification, Measurement & Control Disciplines
• Conduct Access Control Reviews & Execution
• Develop In-House Incident Security Monitoring & Response Procedures
• Design Secure Development Processes & Supporting Technologies
• Implement & Configure Security Information & Event Monitoring
• Full Ownership of ISO 27001 Management System
• (SIEM) Solutions & Detection Tools
• Ownership of Information Security Risk Register & Controls
• Customer Data Security Governance

Requirements of Head of Information Security role would include:

• Strong Technical Knowledge & Experience in Information / Cyber Security
• Experience within Application Security / AppSec / SecDevOps
• Knowledge within Cloud-Hosted Infrastructure
• Understanding of Cyber Threats, Malware & Social Engineering Techniques
• Excellent Communication Skills to both Technical & Non-Technical Stakeholders
• Ideally hold some of the following: CISM, CISSP, CISA or CRISC Qualification
• Experience with ISO 27001 Practices
• Ability to Manage Multiple Projects
• Used to Working in Fast Paced Environments with Sensitive Customer Data
• Experience within both Mid-Range & Larger Scale Corporate Environments