Job Ref: 215267331

Date: 2021-11-26 18:29:20

Apply Now

Location: Hybrid – predominantly home working with occasional visits to Milton Keynes.

Reports to Information Security Head of Strategy, Architecture and Consultancy

Salary: £70,000 (pro rata for a 6 month fixed term contract). May become permanent.

Benefits: Generous

The Role

Background

This FTSE100 organisation is in the process of maturing their Information Security services. A critical part of this is to accelerate the delivery of a number of Information Security projects that are in train. They require an experienced Information Security Engineer who can hit the ground running and drive progress across a wide range of Information Security Specialties; with a focus on project delivery.

Summary of Requirements

You will be responsible for working with colleagues from across the business and IT to deliver successful project outcomes.

You will be expected to provide advice and guidance to a range of information and cyber security projects. This will include documenting and recording architectures, solution designs and project priorities.

You will require a broad range of Information Security skills that can be applied to architect best outcomes and identify and mitigate risks.

Key Deliverables & Responsibilities

• Identify and define information security requirements

• Analyse business needs, research and recommend solutions

• Validate and deliver solutions, ensuring these fully address client issues within the available time and budget

• Develop detailed cyber security designs and incorporate these into the overarching architecture

• Provide direction by translating the overall vision for the project into appropriate goals and objectives for the team and the individual

• Prepare and document standard operating procedures and protocols to support project outcomes

• Participate in the change management process

• Within each project; understand the key risks the organisation faces, the key tactics techniques and procedures that likely threat actors will exploit and ensure mitigations are designed into the resultant solutions

• Work collaboratively with the wider Information Security team

• Where appropriate, establish and manage relations with vendors and related equipment suppliers

• Define security requirements and reviews systems to determine if they have been designed to comply with established security standards

Personal Attributes

• Demonstrates resilience over time, maintaining an up-beat and friendly attitude

• Delegates where appropriate, giving authority and responsibility to others

• Manages and handles conflict as a constructive force for change

• Involves all interested groups in the planning process to ensure their perspectives are incorporated

• Recognises and uses appropriate analytical tools to facilitate problem solving e.g. cost benefit analysis, risk assessment

• Understands the complexity of business decision-making and follows logical processes to ensure commercially viable solutions

• Ability to work on their own initiative, with minimal supervision and meet demanding milestones

Competencies Expected

• A knowledge of the Microsoft security stack

• Expertise in deploying solutions towards a Zero Trust environment

• Experience of successfully managing IT & OT Cyber Security Projects to time, cost and quality

• Experience of working as part of a team and in actively contributing to overall team deliverables

• Proficiency in a wide range of information security technologies including e-mail protection, active directory hardening, network hardening, firewall optimisation, data backup and restoration, end point security

• Understanding and application of Cyber security frameworks e.g. NIST, ISO-27001 and Information Security Management System – ISMS would be beneficial

• Experience of working in accredited environments

• Can demonstrate the ability to take responsibility and make sound decisions on project related issues.

• Possession of professional certifications and membership in professional associations is highly desirable (e.g. CISSP, ISO27000 certification, CISM, CEH, NCSC, CCP)

• Preferably holds a recognised qualification in Project Management (e.g. Prince 2 Practitioner, PMP)

• Working within a structured project environment you will also be experienced in management of the full project lifecycle

Apply Now