Security Architecture Lead — ISO 27001 & Cloud Defense

ARAG plc; Tathall End; On-site; GBP 80,000 - 100,000; Full time

Job summary

A reputable insurance corporation in the United Kingdom is seeking an experienced Information Security Manager to lead their information security operations. The ideal candidate will develop and implement security frameworks and drive compliance programs across multiple regions. The role entails managing vulnerable testing and incident response while effectively communicating security strategies to senior leadership. The company offers competitive benefits including 27 days holiday, private medical insurance, and a pension scheme.

Benefits

27 days holiday with the option to buy additional days

Private medical insurance

Company pension scheme

Group income protection

Group legal protection

Motor and home emergency assistance

Inclusion in the Health cash plan

Salary sacrifice benefits

Qualifications

• Deep expertise in ISO27001:2022, NIST CSF, Cyber Essentials, OWASP principles.
• Hands-on experience with SIEM, IDS/IPS, IAM, NAC, patch management and anti-malware tools.
• Strong grasp of incident response, vulnerability management and Zero-Trust architecture.

Responsibilities

• Lead the InfoSec team and manage day-to-day security operations.
• Develop and implement security standards frameworks.
• Drive compliance programmes, assess risk and build scalable security frameworks.

Skills

Deep expertise in ISO27001:2022

Hands-on experience with SIEM

Strong grasp of incident response

Excellent communication skills

Familiarity with cloud platforms

Education

CISSP certification

ISO/IEC 27001 Lead Implementer or Auditor credentials

Tools

IDS/IPS

IAM

NAC

patch management

anti-malware tools

Job description

A reputable insurance corporation in the United Kingdom is seeking an experienced Information Security Manager to lead their information security operations. The ideal candidate will develop and implement security frameworks and drive compliance programs across multiple regions. The role entails managing vulnerable testing and incident response while effectively communicating security strategies to senior leadership. The company offers competitive benefits including 27 days holiday, private medical insurance, and a pension scheme.