Our client, a prominent player in the Defence & Security sector, is currently seeking an Information Assurance Security Manager for a contract role based in Cheltenham. This position entails working closely with cross-functional teams to bolster information security policies, procedures, and controls. Candidates should have a solid grasp of cybersecurity principles, risk management, and compliance frameworks.

Key Responsibilities:

Policy and Procedure Development

Develop, implement, and maintain information assurance policies, standards, and procedures.
Ensure compliance with relevant regulatory requirements and industry best practices.

Risk Management

Conduct regular risk assessments to identify, assess, and prioritise security risks.
Develop and execute risk mitigation strategies to address identified vulnerabilities.

Security Infrastructure Management

Oversee the design, implementation, and maintenance of security controls, firewalls, intrusion detection/prevention and notification systems, and other security technologies to meet user requirements and standards of the National Technical Authority.
Collaborate with IT teams to ensure the security of network infrastructure, servers, and endpoints.

Incident Response and Investigation

Develop and maintain an incident response plan.
Lead and coordinate incident response activities in the event of a security incident during initial implementation, before transitioning to a BAU function.

Security Awareness and Training

Develop and deliver security awareness programs to educate individuals on information security best practices.
Conduct training sessions in conjunction with SMEs to ensure vigilant and security-conscious users.

Compliance and Auditing

Monitor and assess compliance with information security policies and regulatory requirements.
Coordinate and participate in internal and external security audits.

Collaboration and Communication

Work collaboratively with other relevant departments.
Communicate security initiatives, risks, and issues to senior management.

Job Requirements:

Experience in IT Quality Assurance, Information Security, and Assurance.
Certified Information Security Manager (CISM) or equivalent qualification.
ISO 27001 Auditor / Implementer certification is essential.
Understanding of cybersecurity principles, risk management, compliance frameworks.
Excellent communication and collaboration skills.
If you are an experienced Information Assurance Security Manager looking for a challenging contractor role, we would love to hear from you. Apply now to join our client's dynamic team in Cheltenham