IT Security Manager

Main role purpose:
Own the IT security function and provide leadership and daily management for the IT Security team. Proactively manage all related IT Security matters including but not limited to, IT Security incidents, Risks, Controls, Supplier service to achieve IT, compliance, and business objectives.

Serve as an IT and Cyber Security Subject Matter Expert (SME) supporting Compliance, Design and Development teams to achieve key business objectives. Manage and report against Cyber threats across all business units.

Key duties and responsibilities

• Develop and maintain an information and Cyber security strategy that aligns with business goals and objectives.
• Line management responsibility for the IT security team – lead by example and encourage a culture of continuous improvement.
• Take ownership of all audits and bid responses from an IT Security perspective.
• Manage 3rd party IT Security providers and ensure that all SLA’s are met, and delivery targets are maintained.
• Support the business in maintaining and adhering to compliance certification standards such as ISO27001, Cyber Essentials+ etc.
• Identify and manage all risks and vulnerabilities to meet industry standards; work with internal stakeholders and external providers to mitigate or reduce threat vectors and levels.
• Serve as a point of escalation for IT Incidents as required.
• Keep up to date and advise on the latest relevant IT Security and Cyber Security threats.
• Provide regular reporting to the business on problem analysis, operational performance, and incident reports as required.
• Ensure IT Security incidents and problems are resolved, and Service Level Agreements (SLAs) are upheld in a timely manner.
• Foster, advise and adhere to IT Security operational and build frameworks as required.
• Occasional travel to other Restore sites may be required.

Required skills, knowledge & experience:

• People management experience leading and managing IT Security teams.
• Certified Information Security Manager (CISM) or equivalent certification.
• Certified Information Systems Security Professional (CISSP) or equivalent certification.
• Background of at least 5 years in a dedicated IT security role.
• Knowledge and experience with industry standard compliance frameworks such as ISO 27001, ISO 27002, Cyber Essentials+ etc
• Working experience with Azure, AWS or GCP cloud platforms.
• Good understanding of enterprise IT server technologies and environments.
• Good written and verbal communication skills; ability to present complex IT information to a non-technical audience professionally.
• Experience managing stakeholders and 3rd party suppliers.
• Ability to research, diagnose and resolve IT Security Incidents and Problems.
• Excellent organisation, prioritisation and time management skills. Must be able to work under pressure.
• Tenacious problem-solving and technical IT Security troubleshooting skills.
• Positive can-do attitude, a team player who can work on their own initiative and take ownership to deliver excellence.
• Ability to attain relevant security clearance.
  

Desirable skills, knowledge & experience:

• CCISO certified or equivalent.
• CCSP certified or equivalent.
• Expert firewall technical support experience.
• Knowledge of cyber forensics.
• ITIL certification.
• Prince2 certification.