Systems Security Manager

Liverpool, Merseyside
Homes For Students

We are seeking a skilled and experienced Systems Security Manager to join our dynamic team based in Liverpool, working 40 hours per week, Monday to Friday 9am to 5.30pm.

Purpose of the role: As a Systems Security Manager, you will be responsible for leading and managing cyber security in the context of our in-house systems and development projects, working alongside our third-party network management company. This role is pivotal in ensuring the security and integrity of our in-house systems and, by extension, the overall success of our organisation in the digital landscape.

You will play a key role in designing, implementing, and maintaining robust security frameworks and practices to protect our systems and data from cyber threats, and offer proactive advice and support to the business. You will work alongside the in-house development team to ensure systems meet the latest security protocols and that development is being completed in such a way as to ensure security and mitigation of threats.

You will work closely with key stakeholders to reduce threats, manage risk, and promote good practice, as well as act as in-house lead for any cyber security issues.

You will carry our regular auditing, and will ensure all systems, security, and development is in accordance with ISO 27001 and ISO (phone number removed).

You will be instrumental in managing our system projects from conception to completion. The Systems & Cyber Security Manager will be responsible for attending meetings, creating development specifications, and owning the system development roadmaps, ensuring they are always current and aligned with our business goals, and you will work closely alongside the in-house development team.

You will manage aspects of the systems support desk in accordance with ISO 20000, analysing common themes in support requests, identifying trends, and ensuring system improvements and security aspects are implemented.

You will be knowledgeable about cyber security, development processes, and security standards. You will take an active interest in threat-monitoring, and risk management. You will be familiar with ISO standards, and will thrive in a structured, process-led environment where you proactively manage your time, and support and advise stakeholders and the wider business.

Major Duties:

• Lead the development and implementation of comprehensive cyber security strategies for in-house systems.
• ?Conduct regular systems security audits in conjunction with our third party network provider.
• ?Manage processes and systems in accordance with ISO 27001 and ISO (phone number removed).
• ?Collaborate with IT, development teams, and other stakeholders to integrate security practices into the system development life cycle.
• ?Conduct risk assessments and security audits on new and existing systems, identifying vulnerabilities and implementing mitigation strategies.
• ?Develop and enforce security policies, procedures, and standards in line with industry best practices and compliance requirements.
• ?Act as in-house lead for any cyber security issues, and manage the response to security incidents and breaches, including conducting post-event analyses to prevent future occurrences, including any that occur out of hours.
• ?Stay abreast of the latest cyber security trends, threats, and technologies to continually enhance our security posture, and report on cyber security threats, providing advice and support, liaising with key stakeholders about mitigation and best practice.
• ?Provide leadership and guidance to team members and other employees on cyber security best practices.
• ?Manage vendors, evaluating and selecting security tools and products and manage relationships with vendors to ensure that the services and products delivered are of high quality and meet our security requirements.
• ?Develop and deliver training to educate employees about cyber security best practices, emerging threats, and preventative measures to improve overall knowledge and mitigate risk of cyber-attack. Foster a company-wide culture of security awareness.
• ?Drive a culture of continuous improvement in development and cyber security best practice.
• ?Be an active member of the Information Security Management System (ISMS) Committee.
• ?Attend various meetings to gather requirements, present progress, and align project objectives with company goals.
• ?Work with key stakeholders to develop detailed development specifications and design documents for use by the development team.
• ?Own and maintain the system development roadmap, ensuring it is up-to-date and reflective of current and future business needs, and provide regular progress updates to stakeholders.
• ?Work closely with the development team to recommend and implement system fixes and enhancements based on trend analysis and security features.

In order for Homes for Students to work effectively, you may be required to assist with other areas of work and therefore, you should be prepared to undertake other duties appropriate to the post, as delegated by your line manager.

Experience:

• Minimum of 5 years of experience in a cyber security role, with a focus on system development or IT project management.
• Strong understanding of network infrastructure, database security, cloud security, and encryption technologies.
• Experience with security frameworks such as NIST, ISO27001 and regulatory compliance.
• Knowledge and understanding of current legislation, standards, processes, and tools used in security engineering.
• Knowledge and understanding of cyber security risk assessment, use of risk assessment frameworks, and experience in production of concise technical documentation.
• Ability to communicate complex security concepts to non-technical stakeholders.
• Strong analytical and problem-solving abilities.
• Strong project management skills, with the ability to manage multiple projects simultaneously.
• Strong leadership and decision-making skills.

Homes for Students is an equal opportunity employer and a member of Inclusive Employers. We encourage applications from all backgrounds and communities, and we are more than happy to discuss any reasonable adjustments that you may require.If this sounds like the role for you and you have the skills, knowledge and experience required, we would love to hear from you!