Security Manager

<h2><strong>Duties / Responsibilities:</strong></h2> <ul> <li>To carry out technical vulnerability assessments of IT systems and processes, identifying potential vulnerabilities, to make recommendations to control any risks identified and to ensure they are implemented.</li> <li>To respond rapidly and effectively to IT security incidents, managing them in a professional manor including computer forensics for evidence gathering and preservation.</li> <li>To be responsible for the coordination of regular Information Security Reviews in the business</li> <li>Development, maintenance of Information security policy, procedure and programs. </li> <li>To lead by example and provide good security guidance and advice on best practice to service managers and staff at all levels</li> <li>To provide high quality guidance and assistance to departmental staff in research projects with challenging information security requirements.</li> <li>To be the definitive point of contact for all members of the business seeking advice on information security</li> <li>To oversee the business information security risk register and carry out actions to mitigate risks identified</li> <li>Analysis of information protection technologies and processes to identify technology security weaknesses</li> <li>Lead ongoing risk assessments of data processing systems to confirm the design of logical controls are effective and meet regulatory and legal requirements</li> <li>Provide quality reports to summarize test activities, including objectives, planning, methodology, results, analysis, and recommendations to both technical and non-technical audiences.</li> <li>Monitor their organization&rsquo;s networks for security breaches and investigate violations when they occur.</li> <li>Help to design, implement, and maintain the organization&rsquo;s cyber-security plan.</li> <li>Develop and direct implementation of security standards and best practices for the organization.</li> </ul> <p><strong>Qualification and Experience:</strong></p> <ul> <li>A degree in Information Systems, Computer Science or equivalent plus relevant vocational qualification.</li> <li>At least 6 years&rsquo; experience. in a similar or related environment.</li> <li>An MBA would be an added advantage.</li> <li>Certification in information security (CISSP, CSSLP, CCFP, CISM, etc.)</li> <li>Understanding of information security principles and best practice (e.g., ISO27001 and ISF Standards of Good Practice for Information Security)</li> </ul>