Information Security Manager (Aberdeen (Westhill), GB)

Subsea7; Scotland; On-site; GBP 60,000 - 100,000; Full time

Job description

The Information Security Manager (ISM) will lead the Cyber Security Centre of Excellence at Subsea7, acting as a bridge between the IT Cyber Security and Compliance Director's strategic activities and the technical work of analysts, engineers, and architects.

The ISM will translate IT risk requirements into technical control specifications, develop performance metrics, and coordinate technical activities to manage security infrastructure. This role requires a strong technical background and the ability to align IT and business priorities with security measures. The ISM will also balance real-world risks with business drivers like speed, agility, and performance.

Key responsibilities include leading project teams, managing vendor relationships, and ensuring service levels are met. The ISM will manage technical staff, documentation, and presentation skills, and coordinate security-related activities across IT operations.

What will you be doing?

• Develop a security program and projects with the IT Cyber Security and Compliance Director.
• Assess and report on current and future threats.
• Create budget projections for short- and long-term goals.
• Monitor and enforce compliance with security policies.
• Propose changes to policies for efficiency and compliance.
• Manage and develop a team of security professionals.
• Assist with security audit responses.
• Provide security communication, awareness, and training.
• Manage production issues and participate in change management.
• Participate in the information security governance process.
• Define metrics and reporting strategies with stakeholders.
• Support legal and regulatory compliance efforts.
• Ensure security in hardware, applications, and software.
• Implement technical controls to enforce security policies.
• Align business, technical, and security requirements.
• Develop a strong relationship with the IT Security team.
• Report on technical aspects of security management.
• Manage outsourced vendors for security functions.
• Coordinate incident management and reporting.
• Maintain a knowledgebase of security trends and regulations.
• Manage threat and vulnerability activities.
• Provide guidance on security matters for IT projects.
• Assist in disaster recovery planning and testing.
• Review audit trails and system logs for compliance.

Key Relationships/Stakeholders:
External: Industry peers, audit partners, IT service partners, business partners, professional bodies.
Internal: Heads of business functions, senior management, IT colleagues.

What experience would we like you to have?

• Extensive IT experience, with significant information security experience.
• Experience within a supervisory position.
• Preferred security certifications (e.g., CISSP, CISM).
• Experience with cyber security control frameworks (e.g., NIST, ISO) and delivering Information Security in modern digital workplaces.
• Strong technical background and proficiency in risk assessments.
• Knowledge of cyber risk in the Maritime industry and OT/SCADA infrastructure is preferred.
• Excellent leadership, negotiation, and communication skills.

Candidates must have the Right to Work in the UK.

An environment where you can thrive
We recognise that having a diverse team makes us a better, smarter team. Diversity is something we value and regard it as key to our success.

We encourage new ways of thinking and celebrate our wide range of skills that help us continually challenge the status quo and inspire innovation. An inclusive and diverse environment fosters creativity, improves decision-making and introduces new ways of thinking.

Our people are at the heart of what we do at Subsea7 and we are committed to creating an environment where everyone can thrive. Fair employment practices, fair treatment for all individuals and equal opportunity on the basis of merit are the foundation of how we work and develop together.

What happens next?
If you would like to apply for this role, simply click the Apply button found on this page.

You may be prompted to set up a profile with us. It's quick and easy to do. Or, if you have already created a profile with us, simply log in and submit your application.

Here are 3 top tips to help you submit a successful application:

• Make sure your CV is up-to-date and highlights the transferable skills and experience you can bring to this role.
• We would encourage you to include a cover letter as part of your application. It's your chance to tell us why you would be a brilliant addition to our team.
• Take your time with your application and check there are no errors before final submission.

Once you have submitted your application, we will be in touch as soon as possible with next steps.
To find out more about Subsea7 visit our website here.