Cyber Security Manager

This is a fully remote position, open to applicants in United Kingdom.

📋 Description

• Assist the InfoSec team in achieving security and accreditation goals.

• Collaborate with architecture, technology teams, and the Data Protection Officer to develop, revise, and enforce security processes, procedures, and policies.

• Create the necessary security assurance documentation for customer accreditation in conjunction with Security Architects.

• Aid the accreditation program by coordinating security testing, formulating remediation plans, and overseeing the completion of vulnerability remediation.

• Contribute written input to procurement proposals and customer security questionnaires.

• Articulate the technical and procedural controls in place to safeguard the network and customer data, demonstrating compliance with industry standards.

• Assist the InfoSec team in responding to security incidents, ensuring prompt resolution and action.

• Perform thorough root cause analysis and document lessons learned.

• Provide security advice and guidance to the broader organization.

• Collaborate with team members to develop content for internal team usage and broader business publication.

• Ensure consistent and informed responses to customer tenders and assurance questionnaires.

• Maintain compliance with security standards, service management procedures, regulations, and industry best practices.

• Participate in process documentation and policy reviews.

• Execute security assessments and audits across people, processes, and technology.

• Assist in managing security incidents and vulnerabilities.

• Report to the Cyber Assurance Manager and work alongside Security Analysts, Security Engineers, Security Managers, Security Architects, and the Data Protection Officer.

⛳️ Requirements

• Demonstrated experience in an IT security role.

• Proven background in an IT role, complemented by a solid understanding of security concepts and fundamentals.

• Extensive knowledge of cybersecurity frameworks, standards, and regulations.

• Good grasp of risk management, with an understanding that context is crucial.

• Experience in crafting comprehensive responses to security questionnaires or bids.

• Strong focus on achieving business outcomes.

• Proven experience in collaborative team environments.

• High level of personal motivation and ability to self-manage effectively.

• Ability to communicate security and technical solutions to non-technical or security personnel both internally and externally to NEC.

• Comfortable with collaboration, open communication, and engaging across various functions and teams.

• Excellent verbal and written communication skills.

• Completion of Pre-employment Baseline Standard and Disclosure Scotland (BPSS) checks.

• Must be eligible to achieve and maintain NPPV L3+SC clearance.

• Must have security clearance or the ability to obtain clearance to Non-Police Personnel Vetting Level 3 (NPPV)+SC.

• Must possess a pre-existing right to work and travel within the UK.

• Provide documentary evidence of the right to work and travel within the UK.

• Satisfactory completion of vetting, references, and occupational health checks.

• A Disclosure Barring Service (DBS) check may be necessary depending on the role.

• Desirable: experience in providing pragmatic security assurance documentation aligned with varying levels of risk appetite.

• Desirable: familiarity with security testing processes and reports, such as penetration testing.

• Desirable: experience in a shared environment with multiple tenants and requirements.

• Desirable: experience on solutions or projects that require formal independent accreditations.

• Desirable: working knowledge of Cyber Essentials Plus.

🏝️ Benefits

• Above-average pension scheme.

• Private Medical Cover provided by NEC for employees (with the option to include family members at an additional cost).

• 25 days of paid holiday with the option to buy/sell (FTE).

• 4 times basic salary life assurance cover funded by NEC (with the option to increase coverage at an additional cost).

• Group Pension Plan with employer contributions up to a maximum of 8.5%.

• Flexible benefits tailored to individual needs.

• Complimentary access to LinkedIn Learning with over 15,000 courses.