Customer Info Assurance Security Manager

Computacenter AG & Co. oHG; Hatfield; On-site; GBP 70,000 - 110,000; Full time

Job summary

Computacenter AG & Co. oHG is seeking a Customer Information Security Manager to oversee all cybersecurity matters for our customer accounts across the UK.

You will drive governance, contractual compliance and security incident management while mentoring security professionals in the GIS Cyber Security unit. You will lead security activities including risk assessment, incident response exercises, and collaboration with delivery teams to maintain a high security posture and ensure alignment with

Qualifications

• 2+ years in an Information Security/Cyber Security role in an international environment.
• Completed university degree or comparable education.
• GIS adopted frameworks including ITIL, SAFe, DevSecOps, etc.
• Information security Governance and Management SECTION A.
• Secure Operations Management SECTION E1.
• Management, Leadership, Business and Communications SECTION J.
• English language level B2 (CEFR) or comparable.

Responsibilities

• Provide security management for customer accounts and governance.
• Coordinate with stakeholders and delivery units on escalations and security incidents.
• Lead security risk assessments and remedial actions.
• Ensure compliance with Security Management Plan and contractual obligations.
• Support and mentor security managers within the team.
• Promote awareness of security policies and initiatives across accounts.
• Assist in aligning security plans with customer obligations and needs.

Skills

CISM certification

CRISC certification

ITIL

SAFe

DevSecOps

English (B2)

Education

University degree or comparable

Job description

Customer Info Assurance Security Manager

Location: UK - Mobile England, UK - Hatfield, UK - London, UK - Milton Keynes, UK - Nottingham, UK - Reading | Job-ID: 219421 | Contract type: Standard | Business Unit: Cyber Security

Life on the team

We are now looking for a Customer Information Security Manager within our GIS Cybersecurity Organisation. Working as a Customer Security Manager you will be overseeing all cybersecurity matters that relate to our customers, and our contractual obligations to them, driving our ambition to achieve upper quartile cybersecurity maturity (cybersecurity function & environment at NIST CMMi level 3 and above).

As a Customer Information Security Manager, you will ensure effective delivery of security management for our customer accounts, through stakeholder management, contractual compliance, contract governance and security incident management, including, support and mentoring for a professional team of security managers were required. You will:

What you’ll do

Customer Account Security Partnering (~ 40%)

• Provide key pre-sales support to the account team community. Propose service offerings and the supporting collateral and demonstrate capability to transition service offerings into live service delivery for your allocated customers
• Perform workshops and present Information Security services to significant key account customers in accordance with key account management or Sales Team
• Ensure and support the liaison to customer stakeholders and internal delivery units in the case of escalations or security incident investigation for customer-facing Information Security issues in your allocated customers
• Assist in ensuring all security-related remedial actions internally and externally are carried out in a timely manner
• Proactively engage the security risk management processes to assess and address any commercial or contractual impacts for any deviations from our cybersecurity policies and standards, exploring and advising on options for mitigation.
• Promote awareness of security issues and risks, to ensure our security principles are reflected in our service management goals.
• Support Lead CISM’s, making sure our security plans align to and support our customer obligations and needs.

Customer Account Security Operations (~ 55%)

• Support the Lead CISM’s, in proactively identifying, evaluating, and reducing account cybersecurity risks.
• Assure Computacenter managed 3rd parties and ISPs deliver in line with the Security Management Plan
• Carry out contractual security compliance reviews on a regular basis
• Support and conduct security incident exercises alongside customer and delivery teams
• Assure security related changes to minimise risk to the customer and the business
• Promote the adoption of cybersecurity policies and initiatives that improve our security maturity and ensure security is part of our account operations.
• Advise on projects or initiatives, to ensure cybersecurity risks are well managed in the delivery of change.
• Manage overall customer expectations in a complex or number of customers accounts and ensure key commitments are met
• Ensure solutions are delivered that are consistent with the GIS Cyber Strategy and best practice

CISM Team and Resource Management (~ 5%)

• Provide support to other CISM’s, offering guidance and advise.
• Attain to goals that align with our mission, ensuring you are well-equipped with the skills and resources to achieve our objectives.
• Be an ambassador for the CISM team, encouraging teamwork, problem solving and sharing ideas.
• Support the effective completion of Cyber skills and capability mix in the team to meet business requirements
• Support the review and refinement of the Services Catalogue, framework and processes for the Security Management functions

What you’ll need

• More than 2 years of professional experience in an Information Security / Cyber Security function in an international environment and in cooperation with executives.
• Completed university degree or comparable education/business experience
• GIS adopted frameworks and processes including ITIL, SAFe, DevSecOps, etc.
• Information security Governance and Management SECTION A (3).
• Secure Operations Management SECTION E1 (3).
• Management, Leadership, Business and Communications SECTION J (3).
• English language level B2 (according to the Common European Framework of Reference for Languages) or comparable

Key Technical Skills

• Expertise across cybersecurity CISM and CRISC certified.
• Cybersecurity frameworks including NIST CSF, NIST 800-53 and CE+.
• Information security standards including GDPR, SOC 2 and ISO27K.