Cyber Security Leader — ISMS & DevSecOps Strategy

E.ON; Metropolitan Borough of Solihull; On-site; GBP 80,000 - 100,000; Full time

Job summary

An international energy company is seeking a Cyber Security Manager to enhance IT security within its operations in the UK. The role involves developing a robust Information Security Management System (ISMS) while leading risk assessments according to ISO standards. This position is pivotal in advising stakeholders, including senior management, on best practices for governance and compliance. Candidates should possess significant experience in IT risk management and a proven track record in achieving audit certifications. It offers competitive salary and flexible working arrangements.

Benefits

26 days of annual leave plus bank holidays

Generous pension and life cover

Bonus opportunities

Access to flexible benefits

Industry-leading hybrid work policies

Inclusive support for career growth

Qualifications

• Proven experience managing audits and certifications.
• Comprehensive understanding of Smart Energy Code regulations.
• Effective at influencing senior stakeholders.
• Experience in multi-supplier security environments.
• Hands-on management of an Information Security Management System.
• Strong skills in secure architecture and DevSecOps practices.
• Extensive experience in IT risk assessments and management.
• Expertise in ISO standards and compliance frameworks.

Responsibilities

• Oversee cyber security governance and risk management.
• Lead ISO 27005 risk assessments and manage remediation.
• Develop and maintain the ISMS aligned with ISO 27001.
• Increase cyber risk awareness through engagement sessions.
• Provide guidance on risk mitigation strategies.
• Drive compliance with key regulations and standards.
• Guide security architecture in product transitions.
• Manage third-party security across multiple suppliers.
• Engagement in compliance legislation for various UK initiatives.
• Coordinate penetration tests and manage findings.

Skills

Audit and certification expertise

Knowledge of UK regulatory landscape

Credibility with C-suite

Third-party security auditing

ISMS expertise

Secure architecture design

IT risk management

Subject matter expertise in ISO standards

Compliance with security frameworks

Understanding of UK cyber initiatives

Education

CISSP certification

CISM certification

ISO 27001 Lead Auditor

Job description

An international energy company is seeking a Cyber Security Manager to enhance IT security within its operations in the UK. The role involves developing a robust Information Security Management System (ISMS) while leading risk assessments according to ISO standards. This position is pivotal in advising stakeholders, including senior management, on best practices for governance and compliance. Candidates should possess significant experience in IT risk management and a proven track record in achieving audit certifications. It offers competitive salary and flexible working arrangements.