Internal Audit jobs in United Kingdom

The purpose of the Security function is to bring the organisation’s operational, technical, and information security risks under explicit management control through the SOC services.

Head Office in Wembley, Remote

N/A

Permanent, Full Time

The purpose of the Security function is to bring the organisation’s operational, technical, and information security risks under explicit management control through the SOC services.

1. Take ownership of all operational and technical processes including:

• Security risk management
• Information and security operational incident management
  • Direct management and development of 24×7 SOC Team
  • Incident investigation including root cause analysis, SIEM, SOAR, EDR
  • Act as security incident manager for major security incidents (internal and external)
• Security assurance activities
  • Quality & Compliance
  • Maintain Cyber Essentials accreditations
  • Maintain internal and external security standards
  • Participate in external questionnaires and audits to maintain customer confidence
  • Test operational systems and processes for security hygiene and quality control
• Support business and commercial activities including Statements of Work (SoW) and proposals
• Oversee and manage outcomes of internal and client penetration testing reports
• Provide security training to staff and clients as required
• Manage security tooling and training, ensuring compliance with policies, assurance, and technical requirements
• Provide leadership and strategic direction, including planning, budgeting, and promoting security awareness
• Coordinate with governance functions on security matters and emerging risks
• Serve as a center of excellence for information security management
• Lead compliance monitoring and improvement activities
• Advise staff on security-related issues, acting as a technical or client-facing resource
• Lead internal audits related to Security Management Systems and Services
• Lead or coordinate security risk assessments and controls selection activities

• Minimum 5 years of experience in security management or related fields, preferably leading a SOC
• High integrity and trustworthiness, willing to undergo vetting
• Hands-on leadership and management experience, ideally with a relevant qualification
• Background in technical IT roles with a focus on security
• Strong analytical and problem-solving skills
• Excellent communication and presentation skills
• Teamwork skills for collaboration with IT professionals
• Understanding of security tools and technologies

• Certified Information Security Manager (CISM)
• Certified Information Systems Security Professional (CISSP)