IT SecOps Manager

Chiltern Railways; City Of London; On-site; GBP 71,000 - 87,000; Full time

Job summary

Chiltern Railways is seeking an experienced IT SecOps Manager based at Marylebone Station, London, with travel to other Chiltern network locations as required. This permanent role leads the day-to-day cyber security operations, oversees the SOC, and reports to the Head of IT.

You will own security policies and procedures, drive a Security by Design mindset, and manage GDPR compliance, ISO 27001 projects, audits, and third‑party SOC arrangements.

Qualifications

• 5+ years in Cyber Security/Information Security leadership roles.
• Experience implementing ISO 27001 and GDPR compliance.
• Proven track record managing a SOC and third-party providers.

Responsibilities

• Lead day-to-day cyber security operations and SOC management.
• Develop and maintain information security policies and roadmaps.
• Coordinate audits and regulatory compliance activities.

Skills

Cyber security management

Policy development

Vendor management

Threat modelling

Regulatory compliance

Education

CISSP, CRISC, CISM Security+

Tools

Rapid7

Sophos MTR

SolarWinds

SNOW

Job description

Role: IT SecOps Manager

Location: Marylebone Station, London - with travel to other locations on the Chiltern network as required (This role can also be based out of Birmingham or other locations on the network)

Contract Type: Permanent

Salary: Up to £79,000 per annum

Role Purpose

The IT Information Security Manager will provide day to day management of the technical cyber security environment, SOC and be responsible for information security management. This hands-on role has overall responsibility to ensure appropriate levels of cyber security controls, working alongside other internal teams outside of IT, to ensure ongoing best practice & compliance. This role has one direct report: IT Sec Ops engineer.

Key Accountabilities

• 5+ years exp Cyber Security Manager, Cyber Risk Manager, Cyber Threat Manager, Information Security Manager, IT Security Manager or similar
• Working with the Head of IT to create, maintain, and deliver a robust Cyber Security Roadmap to minimise risk
• Own and maintain all Security related policies and procedures
• Implement “Security by Design”
• Drive a culture of IT & Cyber Security awareness and responsibility
• Develop and maintain the Information Security Strategy
• Conduct ongoing security threat, risk, capability &/or maturity assessments
• Experience & understanding of security legislation, regulatory frameworks, security methodologies & industry standards
• Extensive experience with GDPR and data protection
• Experience setting up and running of SOC services
• Management of a 3rd party SOC
• Experience conducting and responding to Audits
• Experience implementing ISO 27001
• Knowledge of security assessment frameworks (eg threat modelling, controls assessment, risk assessment)
• Responsibility to deal with any security incidents in prompt timeframes, overseeing technical solutions to address specific security challenges & mitigation
• Solid understanding of IT infrastructure fundamentals such as networks, operating systems & databases
• Engage & collaborate with third party vendors, to ensure capacity of retained specialist resource eg IT forensic analysis, penetration testing, security auditing etc
• Experience with Rapid 7, Sophos MTR, Solarwinds and SNOW
• Excellent reporting skills
• Other duties and experience including but not restricted to: Info Sec Strategy, Vulnerability Management and Pen testing scheduling and remediation, Threat Intelligence, Incident management and playbooks, PCI DSS , NIS, Patch management, Azure / O365

Person Specification

• Professional Security Qualifications - e.g., CISSP, CRISM, CISM Security+ etc
• Significant prior experience in an Information Security role, both from a strategy/framework management level and security controls deployment oversight
• Advanced/expert knowledge of Industry Information Security Standards such as ISO, NIST
• Experience of mapping an organisations current operations vs these standards, analysis of gaps the delivery required to close them
• Willing to travel
• CTC Clearance