IT SecOps Manager

Chiltern Railways; Greater London; Sur place; GBP 71 000 - 87 000; Plein temps

Résumé du poste

Chiltern Railways is seeking an IT Information Security Manager based in London or other network locations. You will manage the cyber security environment, SOC operations, and information security programs with a direct report in IT Sec Ops.

You will lead security policy creation, risk assessments, audits, and incident response while collaborating with vendors and business units across the Chiltern network.

Qualifications

• 5+ years in information security leadership roles.

Responsabilités

• Develop and maintain Cyber Security Roadmap to minimise risk.

Connaissances

Cyber security management

ISO 27001

GDPR & data protection

SOC management

Vendor management

Formation

CISSP or equivalent

Outils

Rapid7

Sophos MTR

SolarWinds

SNOW (ServiceNow)

Description du poste

Location: Marylebone Station, London - with travel to other locations on the Chiltern network as required (This role can also be based out of Birmingham or other locations on the network)

Contract Type: Permanent

Salary: Up to £79,000 per annum

Role Purpose

The IT Information Security Manager will provide day to day management of the technical cyber security environment, SOC and be responsible for information security management. This hands-on role has overall responsibility to ensure appropriate levels of cyber security controls, working alongside other internal teams outside of IT, to ensure ongoing best practice & compliance. This role has one direct report: IT Sec Ops engineer.

Key Accountabilities

• 5+ years exp Cyber Security Manager, Cyber Risk Manager, Cyber Threat Manager, Information Security Manager, IT Security Manager or similar
• Working with the Head of IT to create, maintain, and deliver a robust Cyber Security Roadmap to minimise risk
• Own and maintain all Security related policies and procedures
• Implement “Security by Design”
• Drive a culture of IT & Cyber Security awareness and responsibility
• Develop and maintain the Information Security Strategy
• Conduct ongoing security threat, risk, capability &/or maturity assessments
• Experience & understanding of security legislation, regulatory frameworks, security methodologies & industry standards
• Extensive experience with GDPR and data protection
• Experience setting up and running of SOC services
• Management of a 3rd party SOC
• Experience conducting and responding to Audits
• Experience implementing ISO 27001
• Knowledge of security assessment frameworks (e.g. threat modelling, controls assessment, risk assessment)
• Responsibility to deal with any security incidents in prompt timeframes, overseeing technical solutions to address specific security challenges & mitigation
• Solid understanding of IT infrastructure fundamentals such as networks, operating systems & databases
• Engage & collaborate with third party vendors, to ensure capacity of retained specialist resource e.g. IT forensic analysis, penetration testing, security auditing etc
• Experience with Rapid 7, Sophos MTR, Solarwinds and SNOW
• Other duties and experience including but not restricted to: Info Sec Strategy, Vulnerability Management and Pen testing scheduling and remediation, Threat Intelligence, Incident management and playbooks, PCI DSS , NIS, Patch management, Azure / O365

Person Specification

• Professional Security Qualifications - e.g., CISSP, CRISM, CISM Security+ etc
• Significant prior experience in an Information Security role, both from a strategy/framework management level and security controls deployment oversight
• Advanced/expert knowledge of Industry Information Security Standards such as ISO, NIST
• Experience of mapping an organisations current operations vs these standards, analysis of gaps the delivery required to close them