Arcas Technology is partnered with a leading charity based in London who are currently looking for an experienced IT Security Manager to join their business on a 6 month fixed term contract.

Responsibilities

• Cultivate strong relationships with team leaders across departments to enhance security awareness and resolve issues collaboratively.
  
  
• Oversee Information Security Management System (ISMS) operations and Data Protection procedures.
  
  
• Manage the risk register and prepare materials for management review sessions.
  
  
• Establish, maintain, and implement security controls organisation-wide.
  
  
• Develop and track security Key Performance Indicators (KPIs), identifying and coordinating necessary actions.
  
  
• Monitor threats and vulnerabilities, assessing risk levels, and advancing risk treatment strategies.
  
  
• Ensure secure configuration for endpoints and cloud services.
  
  
• Coordinate consultancy projects that require in-depth knowledge of specialised security domains or technical expertise.
  
  
• Continuously assess and enhance security processes, suggesting improvements.
  
  
• Contribute to training and awareness programs, promoting a strong security culture.
  
  
• Prepare for audits, implement remediation activities, and support audit readiness.
  
  Key Skills & Experience
  
  
• Proven experience in risk management.
  
  
• Familiarity with security standards and frameworks, especially ISO 27001.
  
  
• Knowledge of GDPR and the Data Protection Act 2018 (experience preferred).
  
  
• Background in incident management.
  
  
• Strong understanding of high-level security principles and best practices.
  
  
• Cloud platforms (particularly AWS)
  
  
• Identity management, SSO, and federated identities
  
  
• Best practices in infrastructure and endpoint security
  
  
• Encryption, password management, and access control
  
  
• Familiarity with tools and systems such as: Salesforce, JIRA & Confluence, Mac/iOS, ChromeOS, Windows/Office365, Google Workspace.
  
  
• Understanding of key security areas such as, Endpoint, network, cloud, application security, Identity and access management.
  
  
• Growth-oriented, adaptable to a wide range of tasks, and willing to develop new competencies.
  
  
• Professional certifications such as CompTIA+, CISSP, CCSP, or ISO 27001 Auditor.
  
  If you feel that you’re a good fit for this role then please forward your CV to Andy Dale at Arcas Technology