Lead InfoSec Engineer

TN United Kingdom; Croydon; Hybrid; GBP 70,000 - 90,000; Full time

Job summary

A leading company in the fitness industry is seeking a Lead InfoSec Engineer to manage and protect information security. This role involves creating security policies, conducting risk assessments, and ensuring data protection across systems. The ideal candidate will have extensive experience in information security, particularly in cloud environments, and will lead initiatives to enhance security measures.

Benefits

Flexible hours

Condensed work weeks

Part-time contracts

Qualifications

• At least 5 years’ experience in an Information Security position.
• Strong expertise with implementing security solutions for cloud-native systems.
• Experience leading internal security audits and developing infosec strategies.

Responsibilities

• Create and manage the company-wide information security program.
• Develop security policies, procedures, and technology.
• Conduct security audits and assessments.

Skills

Leadership

Problem Solving

Data Security

Incident Response

Risk Assessment

Education

CISSP

CISM

CompTIA Security+

Tools

PowerBI

Nessus

CrowdStrike

Sentinel

Job description

Social network you want to login/join with:

Here at The Gym Group, we believe we are simply the best in our industry! Our amazing teams have skills, abilities, and can-do attitudes that make this a great place to work!

We have strong, embedded values and an easy-going culture which ensures we put our people first. We pride ourselves on being fun, innovative, inclusive, and engaging. We are now on the lookout for a Lead InfoSec Engineer to join our amazing Tech Team.

So, what’s stopping you? Apply today and know that We’re With You every step of the way.

What you need to know about us…

The Gym Group is not like your average gym! To our members, we’re the lowest cost nationwide 24/7 gym with over 230 gyms and counting! To our teams, we are fun, welcoming, engaging, and inclusive. We challenge our limits and push ourselves to impact positive change with our goals and initiatives. We take steps into new areas with a real and authentic purpose - It’s our mission to break down barriers to fitness for all.

We’re #1 in our industry when it comes to our values, our culture, and our people – check out Glassdoor if you don’t believe us. We offer a fantastic place to work in a great working culture and were recognized as #25 in the Top 50 places to work in the UK in 2022! We may be one of the leading budget gym chains in the UK, but there’s nothing budget about our investment into our people. We have retained GOLD in our Investors in People award for the last 6 years and silver in wellbeing last year. We’re recognized as a disability confident and inclusive employer, which we are truly proud of. We have a brilliant team and opportunities for development and growth with support for success. Having recently undertaken some huge projects from a digital point of view, our plans are to keep being innovative, creative, and agile in all that we do.

That’s what you’re looking for, right? We’re With You! So let us tell you more.

What you need to know about the role…

The Lead InfoSec Engineer at The Gym Group is responsible for creating and managing the company-wide information security program to ensure that information assets are properly protected. This role includes the design and execution of policies, procedures, and technology to secure and protect The Gym Group systems and data.

Main Job Activities

• Risk Assessment and Management
• Security Policy Development
• Incident Response
• Security Awareness and Training
• Security Architecture
• Network Security
• Access Control
• Data Security
• Security Audits and Assessments
• Security Documentation
• Security Monitoring

Reporting and Location

Reporting to: Head of Engineering

Based: Hybrid 2+/East Croydon

Here at The Gym Group, we believe we are simply the best in our industry! Our amazing teams have skills, abilities, and can-do attitudes that make this a great place to work!

[...repeated content omitted for brevity...]

What we are looking for…

Our next Lead InfoSec Engineer will have the following:

Essential

• At least 5 years’ experience in an Information Security position in a UK-wide or international digital business.
• Strong expertise with implementing security solutions and tools for cloud-native distributed systems (ideally Azure, Kubernetes).
• Comprehensive knowledge of Information Security Management Systems and tools.
• Ability to deal with highly complex and high-risk problems across diverse IT security threats.
• Strong understanding of data security, including encryption, access management, and data warehouse/security.
• Experience working in fast-paced agile environments.
• Experience with tools like PowerBI, Nessus, CrowdStrike, Sentinel, or similar.
• Experience leading internal security audits and developing infosec strategies.
• Experience managing cyber incident response processes and working with partners.
• Well-connected in the cybersecurity community.
• Experience with SQL-based data warehouse solutions.
• Understanding of network security principles.
• Ability to translate complex technical matters into user-friendly language.
• Innovative leadership and proactive approach.
• Life-long learner.
• Experience in security testing, vulnerability scanning, penetration testing, red team exercises, etc.

Desirable

• Relevant certifications such as CISSP, CISM, or CompTIA Security+.
• Experience with multi-site operations and physical security solutions.
• Good understanding of project management principles.
• Experience with FreshService platform.

Now it’s your turn to apply and tell us about YOU. We offer flexible options like flex hours, condensed work weeks, or part-time contracts. If you have a disability or condition affecting your application, contact us for support. We actively encourage diverse applications and value alignment. We’re With You, truly!