Information Security Manager

Leeds, Yorkshire
Talent Smart

Job Introduction

We are looking for an Information Security Manager to take on this interesting, multifaceted opportunity in Leeds.

As the Information Security Manager, you will play a leading role in ensuring the effective operation of our information security management system and improving our control culture. From policies and controls to assurance procedures and privacy risks, you’ll work alongside your team to ensure we are meeting industry best practice.

You’ll lead your team in embedding information security, governance and risk management across the organisation, driving us towards industry best standards and an ISO27,001 type framework. And with your excellent leadership skills, you’ll mentor and coach to build a high-performing team that truly represents the value of information security.

Role Responsibility

• Provide leadership across the Member Experience, Digital and Data division and the Information Security team
• Contribute to the development and delivery of the MEDD strategy
• Manage the information security policy framework and associated standards
• Maintain an effective ISMS and control framework
• Oversee information risk management, control exception & remediation processes
• Deliver the supplier risk management process
• Ensure appropriate assurance over technology projects and specification of security requirements
• Maintain the ongoing training and awareness programme
• Ensure correct operation of security controls owned within the team as required

The Ideal Candidate

The Information Security Manager will manage a team of 3 so we are looking for a progressive and inclusive leader, skilled at influencing and keen on collaborating.

The ideal candidate will have excellent communication skills and a particular aptitude for communicating and engaging with non-technical people. You have a high attention to detail, analytical skills and are able to identify complex patterns and trends.

Working in a dynamic environment, you are capable of managing pressure particularly when dealing with threats and high demand. Alongside this, you will have knowledge and experience of ISO 27001, as well as the wide range of technical, governance, risk and compliance aspects.

Experience in writing effective information security policies/standards and knowledge of risk management frameworks and methodologies such as Cyber Essentials and PCI DSS, you will also possess an in-depth understanding of security domains, auditing standards, and frameworks.