Information Security Manager - Corporation

Nest pensions; London; Hybrid; GBP 65,000 - 90,000; Full time

Job summary

A leading pension organization is seeking an Information Security Manager to uphold its ISO 27001 certified Information Security Management System (ISMS). The successful candidate will manage security controls, work with third-party suppliers on compliance, and provide essential risk management across the organization.

Benefits

Discretionary bonus scheme

Enhanced auto-enrolled pension contributions

Income protection scheme

Qualifications

• Practical experience operating certified ISMS using ISO 27001/2.
• Experience working with third party suppliers for compliance audits.
• Understanding of various Information Security domains.

Responsibilities

• Maintain and implement the ISO 27001 certified ISMS.
• Advise on security risks, audits, and assurance.
• Communicate complex technical concepts to non-technical stakeholders.

Skills

Risk Management

Network Security

Data Protection

Vulnerability Management

Cloud Security

Job description

Information Security Manager - Corporation

Join to apply for the Information Security Manager - Corporation role at Nest pensions

Information Security Manager - Corporation

Join to apply for the Information Security Manager - Corporation role at Nest pensions

Role Overview
We're looking for a pragmatic, risk focussed Information Security Manager to work within Nest and maintain our ISO 27001 certified corporation Information Security Management System (ISMS). We sit in the second line of defence and advise the business on security risks, incidents, audits, assurance and the implementation and monitoring of security controls that protects Nest. You'll have a solid background in information security management systems, technology and love communicating technical concepts to non-technical people.

Please note the minimum criteria for this role is:

• Practical experience of operating certified ISMS using ISO 27001/2, NIST CSF and other security standards in the design and management of information security controls.
• Practical experience working with third party suppliers to audit and evidence compliance with security policies, standards etc.
• Understanding and experience of various Information Security domains including Security Architecture, Information Security Governance, Network Security, Data Protection, Risk Management, Identity & Access Management, Vulnerability Management, Anti-Malware, Mobile Device Management and Cloud Security

We are open to discussing working patterns.

We welcome all internal applicants to apply for our roles, regardless of your current working pattern or hours. We will aim toaccommodateyourrequestand match your current working arrangements.

Don't worry if you think you don't have all the key skills, it might be worth taking the few minutes to apply as we're good at spotting potential and offer a generous training budget.

Please download a full job description to find a full scope, deliverables, experience and personalattributesrequired for this role.

Reward and recognition

• A discretionary bonus scheme
• Reward and recognition scheme
• Enhanced auto enrolled pension – your contributions start at the default 5% while ours are higher at 8%. If you up your contributions to 6% we raise ours to 9%. If you contribute 7% or more we’ll contribute 10%.
• Income protectionscheme– is an insurance benefit that provides you with income if you cannot work due to illness or incapacity.

Click hereto see the benefits we offer at Nest.
Flexible and agile working
Everyone's personal situation is different.
To make the most out of hybrid working, we've introduced different ways of working, which include (subject to role requirements):

• hybrid of office (Canary Wharf, London)and home working(there will be an expectationto attend the office, once - twice a week, or more, as required)
• reduce or vary working hours
• reduce or vary the days worked
• work compressed hours
• job share

For more information about our recruitment processclick here
Directorate/Department Overview
The Risk and Compliance vision is to become a trusted partner for the business. To enable this, the directorate teams’ shared objective is to enable the first line to deliver business objectives in line with agreed risk appetites.
The Information Security team functions as part of the second line of defence in the Risk and Compliance directorate.
It is accountable for the development, implementation and on-going maintenance of the ISMS (Information Security Management System) processes across Nest Corporation and the Scheme Arrangement outsourced providers in alignment with ISO27001.
The Information Security Manager – Corporation reports into the Head of Information Security and is responsible for ensuring that Nest’s Information Security Management System is operated for the Corporation, enabling the first line business teams to deliver business objectives in line with the agreed risk appetite. This role will work across all internal Nest departments, programmes, projects and initiatives, providing oversight, support and challenge.

Organisational Overview
Nest is an award-winning workplace pension scheme, the largest in the country.

Set up by the government to give every worker in the UK somewhere to save, our first-class responsible investment practice and governance are the backbone of what we do, supported by all the functions you’d expect to find in a thriving business. We’re committed to creating a workplace where you can be your authentic self and offer an inclusive and flexible working environment.

Diversity, Equity and Inclusion
Everyone is welcome to apply for our roles, and we are determined to ensure that no applicant or employee receives less favourable treatment because of their age, disability, gender identity, marital status, national origin, pregnancy or caring responsibilities, race, religion/belief, sex, sexual orientation or socio economic background.

We also recognise the importance of diversity of thought and other forms of neurocognitive variation.

Nest is a Disability Confident Leader, which is the highest level of the Disability Confident Scheme. If you have a disability, please declare that you’re applying through the scheme.
We aim to offer an interview to those applicants who apply through the Disability Confident Scheme and best meet the minimum criteria. However, there may be some circumstances where this is not possible due to the volume of applications.

Please note that this advert may close early if we receive a sufficient number of satisfactory applications.

If you have any difficulty in sending your application or need the application pack in an alternative format, or you require any reasonable adjustments please contact: [e-mail].

Seniority level

• Seniority level

  Not Applicable

Employment type

• Employment type

  Full-time

Job function

• Job function

  Finance

Referrals increase your chances of interviewing at Nest pensions by 2x

Get notified about new Information Security Manager jobs in London, England, United Kingdom.

London, England, United Kingdom 2 weeks ago

Director of Digital and Information Security

London, England, United Kingdom 3 days ago

London, England, United Kingdom 3 weeks ago

London, England, United Kingdom 1 week ago

London, England, United Kingdom 6 days ago

London, England, United Kingdom 3 weeks ago

Manager, Security Governance Risk and Compliance (GRC)

IT Data Protection Security Engineer - Senior Manager

London, England, United Kingdom 6 days ago

London, England, United Kingdom 6 days ago

London, England, United Kingdom 2 weeks ago

IT Procurement Software and Security Category Manager

Watford, England, United Kingdom 2 weeks ago

EMEA Senior Manager Compliance (Certifications)

London, England, United Kingdom 3 days ago

Program Manager, Regional Risk and Compliance

London, England, United Kingdom 1 week ago

Head of Programme - Justice and Emergency Services and Fraud, Bluetownonline

London, England, United Kingdom 1 week ago

Guest Experience Front Office Supervisor Grosvenor Square

London, England, United Kingdom 1 week ago

Software Engineering Manager, SRE, Cloud Incident Response

London, England, United Kingdom 1 week ago

London, England, United Kingdom 1 week ago

Associate/Vice President, Relationship Manager - Commodity Finance (Metals & Agri Team)

London, England, United Kingdom 3 days ago

London, England, United Kingdom 1 week ago

London, England, United Kingdom 2 months ago

London, England, United Kingdom 3 weeks ago

Business Information Security Officer, Europe

London, England, United Kingdom 5 days ago

London, England, United Kingdom 1 week ago

London, England, United Kingdom 2 weeks ago

Uxbridge, England, United Kingdom 1 week ago

Defence Digital - Cyber Security Lead Advisor

London, England, United Kingdom 1 day ago

London, England, United Kingdom 4 days ago

Leatherhead, England, United Kingdom 4 days ago

London, England, United Kingdom 1 day ago

Cyber Security Assistant Manager/Manager

London, England, United Kingdom 1 week ago

We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.