Information Security Manager - Corporation

ZipRecruiter; London; Hybrid; GBP 60,000 - 85,000; Full time

Job summary

A leading company is seeking an Information Security Manager to manage their ISO 27001 certified Information Security Management System. The role involves ensuring security compliance and advising on security risks. Excellent communication skills are essential as you will convey technical concepts to non-technical audiences.

Benefits

Discretionary bonus scheme

Enhanced auto-enrolled pension

Income protection scheme

Qualifications

• Practical experience with ISO 27001/2 and NIST CSF.
• Experience auditing third-party suppliers for compliance.
• Understanding various Information Security domains.

Responsibilities

• Maintain the ISO 27001 certified ISMS.
• Advise on security risks, incidents, and audits.
• Implement and monitor security controls.

Skills

Information Security Management

Risk Management

Network Security

Data Protection

Vulnerability Management

Cloud Security

Job description

Job Description

Role Overview

We're looking for a pragmatic, risk-focused Information Security Manager to work within Nest and maintain our ISO 27001 certified corporation Information Security Management System (ISMS). We sit in the second line of defence and advise the business on security risks, incidents, audits, assurance, and the implementation and monitoring of security controls that protect Nest. You'll have a solid background in information security management systems, technology, and love communicating technical concepts to non-technical people.

Please note the minimum criteria for this role is:

• Practical experience of operating certified ISMS using ISO 27001/2, NIST CSF, and other security standards in the design and management of information security controls.
• Practical experience working with third-party suppliers to audit and evidence compliance with security policies, standards, etc.
• Understanding and experience of various Information Security domains including Security Architecture, Information Security Governance, Network Security, Data Protection, Risk Management, Access Management, Vulnerability Management, Anti-Malware, Mobile Device Management, and Cloud Security.

We are open to discussing working patterns. We welcome all internal applicants to apply for our roles, regardless of your current working pattern or hours. We will aim to accommodate your request and match your current working arrangements.

Don't worry if you think you don't have all the key skills; it might be worth taking a few minutes to apply as we're good at spotting potential and offer a generous training budget.

Please download a full job description to find a full scope, deliverables, experience, and personal attributes required for this role.

Reward and recognition

• A discretionary bonus scheme
• Reward and recognition scheme
• Enhanced auto-enrolled pension – your contributions start at 5%, ours are higher at 8%. If you up your contributions to 6%, we raise ours to 9%. If you contribute 7% or more, we’ll contribute 10%.
• Income protection scheme – an insurance benefit that provides you with income if you cannot work due to illness or incapacity.

Click here to see the benefits we offer at Nest.

Flexible and agile working

Everyone's personal situation is different. To make the most out of hybrid working, we've introduced different ways of working, which include (subject to role requirements):

• Hybrid of office (Canary Wharf, London) and home working (there will be an expectation to attend the office once or twice a week, or more, as required)
• Reduce or vary working hours
• Reduce or vary the days worked
• Work compressed hours
• Job share

For more information about our recruitment process, click here.