IT Security Manager

Devonshire Hayes Recruitment Specialists Ltd ,
London, Greater London
Salary: Up to £90,000 per annum 6 mnt FTC = £45,000

Overview

Devonshire Hayes have been engaged by a leading financial services client to source an experienced IT Security Manager for a six month fixed term contract (FTC). The Information Security Manager will assist with shaping how Information Security is implemented and communicated across the business. Alongside a proven track record of delivering projects and BAU the successful candidate will have worked within Financial Service and have the following responsibilities: Operate as an Information Security subject matter expert, able to provide relevant input into initiatives as required Developing service descriptions, processes and procedures for all cyber security operational services, ensuring compliance to security policies. Identify and report on all cyber security risk and issues, with remediation plans to senior management. Act as the subject matter expert for all security matters relating to projects as directed Refresh and re-invigorate the Vendor Security Assessment Processes, and co-ordinate regular Vendor Security Assessments Co-ordinate the annual Security Policy review process Develop and publish MI to provide senior management with assurance of the integrity of the operational IT control environment, including joiners/leavers/transfers, identity and access management, recertification, security alerts and breach management & reporting, privileged access use. Co-ordinate fieldwork for external audit, assist in finding identification, acceptance and fix drafting Working with the Head of Service Delivery, ensure that audit records e.g. access approvals and re-certifications are created and retained in a manner sufficient to meet audit requirements Manage the delivery of operational and project objectives and ensure that any issues with achieving delivery date are captured and addressed. Represent the Information Security function at department and project meetings. Work with Project Management to ensure that projects have met all Security / Production acceptance criteria prior to implementation. Maintain the Information Security Management SharePoint site Key Experience/Skills: 5 Years experience in a mature information security environment Experience working in a regulated financial services firm on information security matters Familiar with information security frameworks, such as SANS Top 20 CIS, OWASP, ISO 27001:2013, Cyber Essentials, or other similar frameworks An excellent understanding of information security principles and practices, the threat landscape and generally accepted good information security practice and standard. Experience in security architecture, security operations, threat/vulnerability management, cloud security, application security, data privacy and protection. Experience of developing and implementing IT security strategies, objectives and plans. This job was originally posted as www.totaljobs.com/job/89857817