IT & Information Security Manager

Zaizi; London; Hybrid; GBP 70,000 - 90,000; Full time

Job summary

An established industry player is seeking an experienced Information Security Manager to ensure compliance with critical security standards. This role involves developing and maintaining comprehensive compliance programs, overseeing security operations, and leading a dedicated IT support team. The ideal candidate will have extensive experience in IT security and a passion for fostering a culture of security awareness. Join this forward-thinking consultancy and contribute to exciting projects that make a real difference in public sector digital solutions. If you're ready to take on this challenge, this opportunity is perfect for you.

Benefits

25 days paid holiday plus bank holidays

Vitality medical insurance

Workplace Pension 5% employer contribution

Group Life Assurance

Cycle scheme

5 days a year for approved Training

WFH equipment allowance

Buy / Sell Holiday

2 days paid volunteering days

Flexible working

Qualifications

• Extensive experience in IT & Security roles with a focus on compliance.
• Proven track record in managing security incidents and leading teams.

Responsibilities

• Develop and maintain compliance programs for ISO standards.
• Lead IT support management and oversee security operations.

Skills

Security Management

IT management (ITILv4)

Continuous Monitoring/Threat Alerts

Managing security incidents and non-conformances

Data protection duties and GDPR

Strong communication skills

Education

CISM certification

CISSP certification

Tools

Internal security tools

Job description

Role overview

Zaizi is a software consultancy specialising in building bespoke digital solutions using open source software and cloud platforms. We predominantly work with central government agencies and adhere to the Government Digital Service standard.

We take security seriously, and are certified to ISO 27001 and Cyber Essentials Plus, demonstrating our commitment to robust information security practices. To support our continued growth, we are seeking an experienced Information Security Manager.

In this role, you will be responsible for ensuring our ongoing compliance with ISO27001 and Cyber Essentials Plus, including the management of quarterly external audits and the facilitation of Integrated Management System (IMS) meetings. You will also oversee our adherence to ISO 9001 and ISO14001, ensuring that all relevant documentation and processes are audited and maintained.

Furthermore, you will conduct internal and external risk management workshops, supporting both our own compliance and that of our clients. You will provide expert analysis and advisory services on security compliance standards for the applications and cloud solutions we develop and support.

Requirements

Compliance and Security Management:

1. Develop, implement, and maintain comprehensive compliance programs, including integrated management systems for ISO 27001, ISO 9001, ISO 14001, and Cyber Essentials Plus.
2. Oversee security operations, managing internal security tools and processes to ensure optimal protection of company assets.
3. Lead IT Support management, including asset management, budget planning, software deployment, and strategic forward planning.

Team Leadership and Development:

1. Provide effective line management to an IT support team of three support staff, ensuring efficient team processes and driving continuous improvement initiatives.
2. Foster a collaborative and high-performing team environment.

Data Protection and Security Advocacy:

1. Serve as the acting Data Protection Officer, ensuring compliance with data protection regulations.
2. Champion a culture of security awareness, embedding security by design principles throughout the business.

Security Operations and Incident Response:

1. Own and manage critical security processes, including threat detection and incident response, vulnerability and patch management, security advisory and consultancy, and security testing, including the scoping and organisation of external penetration testing.

Strategic Reporting and Collaboration:

1. Collaborate closely with the leadership team, providing insightful reports on key security metrics.
2. Ensure security considerations are integrated into all projects and product development initiatives.

Risk Management:

1. Support enterprise risk and compliance initiatives, taking a lead role in IT risk management.

Experience

1. Extensive industry experience in an IT & Security focused role.
2. You are an experienced supportive manager and can get the best out of your team.
3. You are keen to share your knowledge and are open to giving (and receiving) continuous feedback.
4. Strong communicator who thrives working cross-functionally across multiple teams.
5. You can influence people of all grades to deliver the right outcomes.
6. Security Management.
7. IT management (ITILv4).
8. Continuous Monitoring/Threat Alerts.
9. Managing security incidents and non-conformances.
10. Experience with Data protection duties and GDPR.

Desirable

1. (CISM) certification or CISSP desirable to have.

We are looking for the successful candidate to be able to work in the office for a minimum of two days.

Security Clearance

Certain projects demand that our staff be British and cleared to SC level (or eligible for clearance).

You don't meet all the requirements?

Studies show that women and black, Asian and minority ethnic people are less likely to apply for a job unless they meet every qualification. So if you're excited about this role but your experience doesn't align perfectly with the job description, we'd love you to still apply. You might just be the perfect person for this role, or another role here at Zaizi.

We actively welcome applications from people of colour, the LGBTQ+ community, individuals with disabilities, neurodivergent individuals, parents, carers, and those from lower socio-economic backgrounds.

If you need any accommodations to support your specific situation, please feel free to let us know. For candidates who are neurodiverse or have disabilities, we are happy to make any adjustments needed throughout the interview process-just ask!

Interview Process:

1st stage:

Initial phone screening done by a member of the recruitment team.

2nd stage:

Technical interview, this stage evaluates your technical expertise and problem-solving abilities, especially if you're applying for a technical role.

Final Stage:

10-15 min presentation and a panel interview where multiple people from different departments ask you questions.

Salary: £70,000-£90,000

Benefits

1. 25 days paid holiday, plus bank holidays.
2. Vitality medical insurance.
3. Workplace Pension 5% employer contribution.
4. Group Life Assurance.
5. Cycle scheme.
6. 5 days a year for approved Training.
7. WFH equipment allowance.
8. Buy / Sell Holiday.
9. 2 days paid volunteering days.

Other benefits:

1. Flexible working.
2. Work on exciting projects - make a difference.
3. Empowered to make decisions.
4. Encouraged to fail fast and learn quickly.
5. 1-2-1 and team coaching / training available to all our staff.

For further information contact- [e-mail]

Nat Hinds-Head of Talent

Kayla Kirby-Talent Acquisition Specialist