TOpS Security Manager

Pearson; United Kingdom; Hybrid; GBP 60,000 - 80,000; Full time

Job summary

A leading education company is seeking an experienced Security Manager to ensure all contractual security deliverables for their projects. The role requires expertise in information security, effective communication, and the ability to work within a high-stakes environment. Candidates with current security certifications and experience in risk assessment are encouraged to apply. This hybrid position is based in the UK with flexible office attendance.

Qualifications

• Prior experience in Information Security in a customer or business facing role.
• Excellent technical knowledge of cloud and on-premises services.
• Strong knowledge of IT and cyber security principles.

Responsibilities

• Working with cross-functional project teams to ensure secure delivery.
• Providing input into divisional security strategy.
• Assessing compliance with security policies and identifying control gaps.

Skills

Information Security knowledge

Strong communication skills

Risk assessment and management

Technical knowledge of cloud and on-premises services

Ability to work under pressure

Education

Current security certifications (CISSP, CISA, etc.)

Job description

About the Job

We are seeking an experienced Security Manager to join our PAS team to deliver a complex assessment programme. The Security Manager will work with the Security Director to ensure that all contractual security deliverables and milestones are met. They will have a strong focus on accuracy, quality, attention to detail and working within a high-stakes, regulated environment. Strong written and verbal communication skills and experience in working with stakeholders, sub-contractors and clients are key components of this role. They must be comfortable writing and reviewing contractual and security documents, plans and strategies. Experience of operating within a regulated environment would be beneficial.

The role requires frequent interaction with business and technology partners and covers a broad range of platforms and technologies. The responsibilities include:

• Working with cross-functional project teams to ensure secure delivery of the change program across the complete project lifecycle and authorizing security sign-off.
• Providing input into divisional security strategy and roadmap planning.
• Supporting the secure development process (SDLC) working closely with Development teams.
• Keeping informed of new and emerging security threats & assess effectiveness of current controls to identify opportunities for program improvement.
• Assessing compliance with security policies to identify control gaps, develop remediation plans and determine residual risk.
• Supporting the incident management process and central security operations team as a domain expert.
• Identifying, collating, and managing risks. Ensuring that actions and risks are managed.
• Provide consultancy and guidance to business partners on all matters relating to Security.
• Provide security input into contract delivery.
• Develop and deliver information security awareness programs within the division.
• Provide guidance and leadership to junior team members.

Essential Skills & Experience

• Prior experience in Information Security in a similar customer or business facing role.
• Current security certifications such as CISSP, CISA, CRISC, SABSA, GIAC, CCSP, CCSK or equivalent.
• Excellent technical knowledge of cloud and on-premises services and infrastructure, including network, perimeter, application and end points.
• A solid understanding of the cyber security risks associated with various technologies and how to apply appropriate controls to mitigate these.
• Strong knowledge of IT and cyber security principles and experience with specific assurance frameworks such as ISO27001.
• Experience in risk assessment and management in the context of information security.
• Ability to work under pressure and to tight deadlines and manage own time effectively.
• Excellent oral, written communication and presentation skills.
• Confident at communicating to business and technology partners and senior management.
• Ability to solve problems using initiative and a methodical approach to tasks.
• Adaptable and flexible approach and able to prioritise workloads.
• Ability to collate and analyse information from various sources.

Desirable Skills & Experience

• Prior experience in delivery of government contracts in a regulated environment.
• Previous experience relevant to Security Architecture.
• Technical (non-cyber) experience or qualifications.

Job Location and Hours

The role is aligned to London, Manchester, Rotherham, or Oxford offices in the UK, working a 37.5 hour week.

All our roles are hybrid working; our current policy requires our team to visit their base office no more than once a week, and with the possibility of occasional business travel to other Pearson sites. Candidates must be a suitable commute from their base office as our office presence policy may change to require more frequent presence in 2024.

Who we are:

At Pearson, our purpose is simple: to help people realize the life they imagine through learning. We believe that every learning opportunity is a chance for a personal breakthrough. We are the world's lifelong learning company. For us, learning isn't just what we do. It's who we are. To learn more: We are Pearson.

Pearson is an Equal Opportunity Employer and a member of E-Verify. Employment decisions are based on qualifications, merit and business need. Qualified applicants will receive consideration for employment without regard to race, ethnicity, color, religion, sex, sexual orientation, gender identity, gender expression, age, national origin, protected veteran status, disability status or any other group protected by law. We actively seek qualified candidates who are protected veterans and individuals with disabilities as defined under VEVRAA and Section 503 of the Rehabilitation Act.

If you are an individual with a disability and are unable or limited in your ability to use or access our career site as a result of your disability, you may request reasonable accommodations by emailing [e-mail].

Job: Engineering

Job Family: TECHNOLOGY

Organization: Assessment & Qualifications

Schedule: FULL\_TIME

Workplace Type: Hybrid

Req ID: 20604

\#LI-REMOTE