Information Security Manager
Our client is recruiting for an Information Security Manager with Defence/ MOD industry experience. As Information Security Manager you will be responsible for the professional and effective governance of Information, IT and Cyber Security requirements across the UK. The role also provides direct support to the Head of Electronic Warfare to enable the effective delivery of Electronic Warfare Operations across our clients Services. Further, the role provides direct support to the Technology & Innovation Team to ensure appropriate Information Security management and governance during development, production and in-service application across the business. This individual will modernise and ensure a compliant approach to Cyber Security at our business sites, and broader sensitive IT and information. Role is based at Christchurch and will require occasional travel to other business sites (mostly UK based). The salary is very competitive with excellent benefits.
As an Information Security Manager your skills and qualifications will ideally include:
- Defence Sector experience, including an in-depth understanding of the compliance requirements of Home Office SPF, JSP440 and JSP490
- Security cleared to SC Level, or able to obtain
- Cyber Security for Defence Suppliers (Def Stan 05-138)
- Knowledge of ISO/IEC 27001 Information Security Management (ISMS)
- Demonstrable Risk Management experience within HMG/MOD framework, including writing, updating and reviewing RMADS, SyOPS, Risk Balance Case (RBC) and other security documentation
- Demonstrable technical security and information assurance risk management and solutions within complex scenarios
- Demonstrable experience in managing Cryptographic material and associated processes
- Familiar with ITAR regulations and security constraints
- Understanding of air platform security and accreditation
- CESG Certified Professional (Security and Information Risk Advisor, Auditor or Security Architect, etc…)
- Holder of key security industry qualifications such as CISSP
- Lead / Internal Auditor Qualification
As an Information Security Manager your main responsibilities will involve:
- Document/Information, IT & Cyber Security
- Provision of Information Assurance and Governance
- Act as the Lead Crypto Coordinator for all UK sites, as well as being the Crypto Custodian.
- Establishing Security Governance and Risk Management Reporting structures across programs, including Security Working Groups.
- Management and enabling of an effective Information Security Framework, to allow effective and efficient use of the secure data system.
- Interface between MOD Accreditor, MOD Delivery Team, Suppliers, Project Teams, the information asset owner and the end user community, ensuring that all aspects of security are delivered throughout program lifecycles.
- Responsible for the oversight, maintenance and where required, the writing of up-to-date security related documentation, including RMADS, SyOPS, Risk Balance Cases, Local Security Instructions, Crypto Security Instructions, Security Impact Assessments, Test Security Instructions, etc…
- Management of the Information Security Risk & Change Registers.
- Advice and oversight of all relevant Information Security activities, ensuring compliance with DEF STAN 05-138 (Cyber Security for Defence Suppliers) and ISO/IEC 27001 (Information Security Management), as required.
- Provide IT and Cyber Security assurance and governance for UK through effective oversight of Group IT in accordance with the extant SLA.
- Ensure remain compliant and up to date with all applicable legislative Security requirements and documentation.
- Assist with investigations into information security incidents and/or breaches.
Keywords: Information Security Manager, Defence, MOD, Cyber Security, RMADS, SyOPS, DEF STAN, CESG Certified Professional, aerospace
Information Security Manager
Location: Christchurch, Dorset
Salary: very competitive plus excellent benefits