Description
iSource IT are currently engaged with one of our key clients to recruit an interim Information Security Manager on an initial 6 month contract based in central Leeds.
The purpose of this role is the management and oversight of all IT security controls that underpin the end to end delivery of operational IT services to external clients and employees.
Responsibilities include, but not limited to:
- Information Security Strategy.
- Compliance to group security standards for applications and infrastructure.
- Vulnerability Management
- Security awareness across the business.
This role is accountable for direct liaison with stakeholders overseas, suppliers and the IS community over secure operation of the clients infrastructure and applications.
As a member of the IT Service Delivery Leadership Team this role will be responsible for continual service improvement within its direct accountabilities, but also across the broader function providing governance and support to other teams as needed.
Key Accountabilities
- To plan, manage and oversee the development, implementation and maintenance of security standards/processes/procedures to support the delivery of robust applications and infrastructure, looking for synergies across the estate.
- To oversee the management of Information Security, responding to tickets within SLA and managing security breaches/incidents with appropriate focus and control.
- To support the delivery of business and technology change through active project engagement providing advice, guidance and control standards for the information security domain.
- Accountable for the communication of key Information Security policies and processes to business stakeholders to maintain physical and logical security across the organisation.
- Ensure adherence to TRMIS security standards through robust management of applicable processes.
- To govern vulnerability management including but not limited to intrusion detection, penetration testing, malware/SPAM and phishing.
- Working with peers across IT on a Matrix basis to develop strategic security roadmaps and recommend system improvements to deliver an ongoing improvement to the security of services under management.
- To keep abreast of current and emerging capabilities within appropriate technologies area.
- Maintain the first/second/third line of our operational risk and compliance defence by ensuring department/team/individual adherence to business processes and procedures that are designed to meet the regulatory standards set out in the relevant FSA rules and guidance.
- Use the training and competence scheme to maintain the appropriate knowledge, skills and expertise to carry out the role competently.
- Ensure that roles that he/she is responsible for are performed by individuals with the appropriate knowledge, skills and expertise and that competence is maintained and assessed.
- Proactively manage the resourcing levels across the team to protect the needs of BAU whilst delivering to project commitments using appropriate resource options and ensuring any recruitment follows defined guidelines.
- Implementation of a Service First Culture to ensure IT does all it can to impact Client, Partner and Employee satisfaction levels.
- Treat clients fairly at all times.
- To undertake ongoing improvement activity to existing process to drive alignment to the centre and achieve efficiency improvements.
- Take an active role in the leadership, management and direction of the broader Service Delivery function.
- Build and maintain close working relationships with key IS and business partners to ensure collaborative working environment.
Key Knowledge
- Knowledge of the Financial Services Sector - specifically Wealth Management.
- Know the regulatory environment and associated risks that require managing.
- Understanding of Investment products; characteristics and applications.
- Understand the principles of Treating Customers Fairly.
- Understand the principles of Training and Competence.
- Understand the key drivers of Client Loyalty within a retail environment.
- Extensive experience of managing Information Security in an ITIL aligned Financial Services organisation.
- Formal qualification(s) in Information Security (eg CISSP or CISM)
- Proven experience in writing business documents, procedures and recommendations.
- Proven ability to work and communicate with staff at varying levels of seniority from technicians to Executives on both technical and non-technical levels.
If you feel like this role could be of interest then please don't hesitate to apply today and I'll contact you directly.