SC Cleared Cyber Security Manager Full Time

Alexander Mann Solutions – Public Sector Resourcing

Cyber Security Manager Inside IR35

Contract Term: 6 months

Contracting Authority: NS&I (National Savings & Investments)

Location: Hybrid – London, Durham, Glasgow or Lytham (2-3 days per week)

NS&I is one of the largest savings organisations in the UK with more than 24 million customers and over £218 billion invested. We are both a government department and an Executive Agency of the Chancellor of the Exchequer. Our origins can be traced back more than 150 years to 1861.

A small company with a big reach. We care for colleagues, respect one another, invest in our people and manage talent effectively.

This role is subject to Baseline Personnel Security Standard and financial credit checks.

The Cyber Security Manager is a second line of defence role within the Risk Directorate and will be responsible for supporting the Senior Cyber Security Manager by providing oversight and assurance of NS&I’s Cyber security strategy, policies and standards across the enterprise and supply chain for: The Cyber Security Manager will support the Senior Cyber Security Manager by conducting assurance activities and being the primary point of contact for suppliers delivering our retail customer services including the IT capability.

As a Cyber Security Manager, your main responsibilities will be:

• Proactively identify, escalate, monitor and manage security risks associated with business activities.
• Work with suppliers to understand the control environment operated and review evidence to determine the level of risk within the environment.
• Follow the pre-defined assurance plan to sample test the control environment operated by suppliers by reviewing evidence of the controls operated.
• Escalate any identified issues from testing which could increase NS&I’s risk profile through governance reporting.
• Act as NS&I’s first point of contact for the suppliers within the Cyber Security Managers portfolio including understanding the interrelated portfolio complexity’s.
• Support the Senior Cyber Security by attending security working groups with individual suppliers to oversee and assure evidence to determine the effectiveness of the control environments operated by each supplier.
• Monitor the performance of suppliers within your portfolio to validate that identified threats, events and incidents are responded to effectively, efficiently and that lessons learned are identified and implemented, driving continuous improvement.
• Support the wider security team by providing subject matter expertise to all colleagues and suppliers, promoting good security practice.
• Undertake monthly horizon scanning to ensure that the threat environment is appropriately monitored, and that NS&I has visibility of cyber security threats which could affect the business.
• Monitor industry standards for cyber security to ensure the business is aware of changes in the external environment which could impact the risk profile of the organisation.

Essential criteria & Technical skills:

• Experience of conducting cyber security risk assessments, developing cyber security risk mitigation plans, and presenting these risks in non-technical language linked to business objectives for a senior management audience.
• Experience in challenging suppliers on the evidence they provide relating to their cyber security control environments.
• Experience of deploying or assuring evidence against the National Institute of Standards and Technology (NIST) Cyber Security Framework (CSF) and ISO27001.
• Experience in developing cyber security performance metrics linked to business objectives which inform senior management of the performance of the cyber security control environment.
• Experience in responding to or managing security incidents/breaches, overseeing patching/vulnerabilities or hardening systems.
• Experience implementing security solutions surrounding cloud transformation, data management, data storage.

Technical skills

• Ability to analyse complex technical information in order to provide appropriate advice and guidance to senior management.
• Deep understanding of security technologies, tools, and systems such as SIEM, SOAR, EDR, DLP, VPN, Encryption techniques, IDS/IPS.
• Cloud Security – IaaS, PaaS & SaaS.
• Knowledgeable in key IAM concepts (Lifecycle and governance, Role Based access control, user provisioning, workflow and self-service management, password management, audit and compliance, single sign on)

If this role sounds like something that you would be interested in, please click the link to apply or get in touch with Rebecca Nolan

Disability confident

As a member of the disability confident scheme, NS&I guarantees to interview all candidates who have a disability and who meet all the essential criteria for the vacancy. In cases where we have a high volume of candidates who have a disability who meet all the essential criteria, we will interview the best candidates from within that group.

If you qualify for the above, please notify us on .

We will be in touch to discuss your suitability and arrange your Guaranteed Interview.

Should you require reasonable adjustments at any point during the recruitment process or if there is a more accessible way for us to communicate, please do let me know.

In applying for this role you acknowledge the following, this role falls in scope of the Off Payroll Working in the Public Sector legislation. Any rates of payment quoted will reflect the gross rate per day for the assignment and will be subject to appropriate taxes and statutory costs. As such the payment to the intermediary and your income resulting from this contract will be different.

Please be aware that this role can only be worked within the UK and not Overseas.