Information Security Manager

Hays.; London; On-site; GBP 45,000 - 75,000; Full time

Job summary

An established industry player is seeking a skilled IT Security Engineer to bolster their cybersecurity efforts. This role is crucial in protecting sensitive information and ensuring compliance with security protocols. You will design and implement security measures, maintain cybersecurity equipment, and educate staff on best practices. The ideal candidate will have a strong background in information security, with expertise in firewall management and application security. Join a dynamic team committed to safeguarding digital assets and enhancing security frameworks in a collaborative environment. If you are passionate about cybersecurity and ready to tackle advanced threats, this opportunity is for you.

Qualifications

• 3-5 years of experience in information security or related field.
• Strong knowledge of firewall administration and application security.

Responsibilities

• Develop secure network solutions to defend against cyber threats.
• Investigate security breaches and conduct forensic investigations.
• Educate staff on network and information security procedures.

Skills

Firewall Administration

Encryption Technologies

Network Protocols

Application Security

Incident Response

Communication Skills

Education

Bachelor's degree in Computer Science

Relevant certifications (CISSP, CEH)

Tools

SIEM Tools (Splunk, Solarwinds, ManageEngine)

Intrusion Detection Systems

Vulnerability Management Tools

Job description

Your new company - Specialist Global Financial Services
Your new role - Permanent - ON SITE 5 Days per week. - UK Only

Job Title:

IT Security Engineer

Job Brief:

As the first line of defence in the IT department, the purpose of this role focusses on information security, cybersecurity and data security, including a wide scope of physical security operating systems such as Windows and Linux, network security, firewall and other security devices, application security both development and testing phrases SAST & DAST, terminal security, backup security, third party and supply chain security. We are seeking a skilled IT Security Engineer to identify, investigate, and mitigate potential security risks to protect the information systems and computer networks.

Responsibilities:

• Design and Implement Security Measures: Develop secure network solutions to defend against advanced cyber threats.
• Maintain the cybersecurity equipment, including firewall, IPS, WAF, WSUS, ATA, AD policy.
• Compile and develop cybersecurity policies and procedures, conduct regular reviews.
• Application Security: Ensure the security of applications by implementing secure coding practices, conducting code reviews, and performing vulnerability assessments.
• Information Security: Protect sensitive information by developing and enforcing security policies and procedures.
• Maintain the SIEM tools, make sure security logs generated from security systems and devices are configured and safeguarded properly.
• Incident Response: Investigate security breaches, conduct forensic investigations, and mount incident responses.
• System Audits: Work with Internal Audit and other departments to execute penetration tests, cybersecurity risk self-assessment, ensure best practice and international baseline standards are in place and in line with local regulation.
• Perform routine audits of systems and software to ensure compliance with established security protocols.
• Training: Educate staff on network and information security procedures.
• Collaboration: Work with the IT team to maintain security configurations and disaster recovery plans.
• Expertise and knowledge of the security framework includes NIST 800, ISO 27001, cybersecurity guidelines from PRA, FCA and ICO, familiar with GDPR regulation.
• Strong knowledge of IT internal control and audit, information security officer is highly recommended.
• Network Security (Routing, Firewall, Switch, Internet Gateway) and Security Products (SIEM, EDR, etc.), familiar with SIEM tools such as Splunk, Solarwinds, ManageEngine, etc.
• Documentation: Document any security breaches and assess their damage.

Requirements:

• Education: Bachelor's degree in Computer Science, Cybersecurity, or a related field. Relevant certifications such as CISSP or CEH are desirable.
• Experience: 3-5 years of experience in information security or a related field.
• Skills: Knowledge of firewall administration, encryption technologies, network protocols, and application security. Excellent communication skills to convey technical concepts to non-technical stakeholders.
• Languages: Due to the organisation having offices in China, Mandarin would be an advantage.

Preferred Qualifications:

• CISA/CISSP/CCSP
• MCSA-Microsoft Windows Server
• MCSE- Microsoft Certified Solution Expert;
• MCITP-Microsoft Certified IT Professional;
• VMware Certified Professional; CCNA/CCNP

• Experience with security tools and technologies such as intrusion detection systems, SIEM, and vulnerability management tools.
• Familiarity with regulatory requirements and industry standards related to IT security.

If you're interested in this role, click 'apply now' to forward an up-to-date copy of your CV, or call us now.

If this job isn't quite right for you, but you are looking for a new position, please contact us for a confidential discussion about your career.

#4672461 - James Francis