UK jobs. Bigger possibilities.

IT SecOps Manager

On-site in London·Full-time·Added yesterday (last checked 27 Oct)

Chiltern Railways

2 open roles

Apply

Our summary

Salary: Up to £79,000 a year
About £4,700 a month after tax.
Work mode: On-site, London
Contract: Full-time
Experience: 5+ years
Holiday: 25 days holiday + bank holidays
Commute: Cycle to work scheme

Skills

Requirements

What we're looking for

5+ years exp Cyber Security Manager, Cyber Risk Manager, Cyber Threat Manager, Information Security Manager, IT Security Manager or similar
Experience & understanding of security legislation, regulatory frameworks, security methodologies & industry standards
Extensive experience with GDPR and data protection
Experience setting up and running of SOC services
Management of a 3rd party SOC
Knowledge of security assessment frameworks (eg threat modelling, controls assessment, risk assessment)
Solid understanding of IT infrastructure fundamentals such as networks, operating systems & databases
Professional Security Qualifications - e.g., CISSP, CRISM, CISM Security+ etc
Significant prior experience in an Information Security role, both from a strategy/framework management level and security controls deployment oversight
Advanced/expert knowledge of Industry Information Security Standards such as ISO, NIST
Experience of mapping an organisations current operations vs these standards, analysis of gaps the delivery required to close them
Willing to travel
CTC Clearance
Full clean driving licence

Pay & benefits

What you'll get

We offer a competitive salary and benefits package, a culture of respect, challenge and innovation - with excellent opportunities for growth and development.

All active staff and their eligible partners/dependants are entitled to free standard class leisure travel on Chiltern Railways.
Active staff are also entitled to residential and duty standard class travel.
Defined Benefit Pension Plan
Reward Gateway - access to online benefits and discounts
Cycle to Work Scheme
Employee Assistance Plan
Physio Line - We offer complementary 24-hour physio for everyone
Eye Care - You're entitled to free eye tests and if you need glasses for computer use we will pay up to £80.00 towards your lenses and frames
We offer 25 days annual leave as well as statutory holidays
Flexible working
Support - Peer Support, Samaritans, and Railway Chaplain

The role

Role: IT SecOps Manager
Location: Marylebone Station, London - with travel to other locations on the Chiltern network as required (This role can also be based out of Birmingham or other locations on the network)
Contract Type: Permanent
Salary: Up to £79,000 per annum

Role Purpose
The IT Information Security Manager will provide day to day management of the technical cyber security environment, SOC and be responsible for information security management. This hands-on role has overall responsibility to ensure appropriate levels of cyber security controls, working alongside other internal teams outside of IT, to ensure ongoing best practice & compliance. This role has one direct report: IT Sec Ops engineer.

What you'll do

Key Accountabilities

Working with the Head of IT to create, maintain, and deliver a robust Cyber Security Roadmap to minimise risk
Own and maintain all Security related policies and procedures
Implement "Security by Design"
Drive a culture of IT & Cyber Security awareness and responsibility
Develop and maintain the Information Security Strategy
Conduct ongoing security threat, risk, capability &/or maturity assessments
Experience conducting and responding to Audits
Experience implementing ISO 27001
Responsibility to deal with any security incidents in prompt timeframes, overseeing technical solutions to address specific security challenges & mitigation
Engage & collaborate with third party vendors, to ensure capacity of retained specialist resource eg IT forensic analysis, penetration testing, security auditing etc
Experience with Rapid 7, Sophos MTR, Solarwinds and SNOW
Excellent reporting skills
Other duties and experience including but not restricted to: Info Sec Strategy, Vulnerability Management and Pen testing scheduling and remediation, Threat Intelligence, Incident management and playbooks, PCI DSS, NIS, Patch management, Azure / O365