Information Security Lead 12 month FTC

Your tasks

The Information Security Lead will play a central role in maintaining and strengthening the organisations information and cyber security posture during a period of significant technology transformation. This is an exciting opportunity to work within a small and highly supportive team, where you will be involved in all aspects of information and cyber security, spanning governance, risk, assurance, incident response, supplier oversight, culture and strategic change.

• Maintaining and embedding existing security policies, standards and controls.
• Continuing to improve security maturity against frameworks such as NIST/CAF.
• Gathering assurance and evidence that controls are operating effectively.
• Producing security metrics and reporting for senior stakeholders/board.
• Managing and challenging outsourced security providers, including the SOC and MSP.
• Supporting supplier and third-party security risk.
• Maintaining security awareness and training activity.
• Supporting Cyber Essentials Plus and ongoing assurance activity.
• Providing security input into wider projects and business change.
• Coordinating the business response should a significant security incident occur.

Requirements

Skills Required

• Strong information security governance, risk and assurance experience.
• Knowledge of NIST, CAF or similar security frameworks.
• Cyber Essentials Plus knowledge/experience.
• Security/major incident management experience.
• Experience managing or assuring outsourced SOC/MSP/security providers.
• Strong third-party and supplier management experience.
• Ability to assess whether security controls are genuinely working rather than simply accepting supplier reporting.
• Strong stakeholder communication and reporting skills.
• Ability to independently manage an established security roadmap.

The Person Given the remote nature of the position, my client is looking for someone who is a self-starter, proactive and comfortable taking ownership without needing lots of day-to-day management. They also need to be confident challenging suppliers and communicating with both technical and non-technical stakeholders.

Other

You will employed on a remote contract with occasional travel to their HQ in London.

This role is for a 12 month FTC and ideally looking for an immediately available candidate.