Contract - Information Security Manager

Select how often (in days) to receive an alert:

At Honda we embrace inclusion in our various policies, so whilst our contracts state that the hours are as required to fulfil the role with a minimum of 35 hours per week, we offer flexibility for when you work. The regular office hours are 08:00 – 16:00 Monday to Thursday with a half hour lunch break & 08:00 – 13:00 on a Friday. However, we offer flexibility of when you work with our daily flex-time start of between 07:00 and 11:00 providing that there is no business requirement.

Whilst there is no contractual right to work from home, the flexibility we offer is that you can request to work from home 2 days per week, again providing there is no business requirement to attend the office.

Role:
Honda is embracing digital technology to transform the way we do business across all of our product lines. From online selling and connected vehicles to implementing the latest technology in our back-office operations, we need to ensure that business agility is supported by a robust security governance framework, protecting Honda’s and our customers’ information and data.

As a member of the regional IT security team you report to the Head of Security and Networking. You will be responsible to oversee and coordinate IT security operations across all locations in Europe, covering Honda’s sales, logistics, manufacturing and R&D entities.

You will address identified IT security risks and issues, on an organizational and technical level. Propose changes to existing IT Security policies and procedures to ensure operating efficiency and compliance.

Perform risk assessments and compliancy checks against existing solutions and projects, ensuring Honda’s IT security requirements are met.

You advise Honda IT staff and business users on complex IT security matters and support them during various project activities.

As part of Honda’s global organisation, you closely work and coordinate with Honda Motor’s (Japan) global security team on IT security governance and operation initiatives.

Main Responsibilities:

• Coordinate IT security operational activities with providers and IT staff.
• Coordinate and perform threat and vulnerability management activities, identify risks, recommend treatment plans and provide communicate information.
• Coordinate and perform security incident management activities, including detection, response and reporting.
• Monitor and report on technical and operational IT security controls.
• Recommend and implement security controls to meet security policies, legal, regulatory and audit requirements.
• Report on compliance with security policies.
• Propose changes to existing IT Security policies and procedures to ensure operating efficiency and compliance.
• Provide expert guidance to projects on IT security matters.
• Advise IT staff to ensure that security is factored into the evaluation, selection, installation and configuration of hardware, applications and software.
• Work with the IT Security Manager to develop a security roadmap that addresses identified risks and business security requirements.
• Stay up to date with IT security related technologies and competences.
• Prepare and conduct security awareness and security training initiatives.

KPI’s:

• High level of compliance with Information Security regulations, standards and internal policies.
• Low number of Information Security incidents per severity.
• Low average of response time on Information Security incidents per severity.
• High accuracy of threat and vulnerability analysis.
• Effective remediation plans and controls for identified vulnerabilities.

Qualifications, skills and experience:
Required

• Bachelor / Masters degree and / or significant experience in IT and IT security related matters, preferably in an international environment.
• Preferably holds an Information security professional certification such as CISMP.
• Good knowledge and understanding of Information security technologies such as:
  • Access control
  • Vulnerability management
  • Data loss prevention
  • Web Security
  • Anti-malware controls
  • IDS/IPS
  • IT networks
  • System Administration
• Excellent problem-solving skills, capable of working under pressure on highly complex IT solutions.
• Strong information security risk-based prioritisation capabilities.
• Good communication skills (able to explain complex technical concepts to both cyber professionals as well as business colleagues).
• Willing to travel occasionally within Europe.
• Familiarity with applicable legal and regulatory requirements, including, but not limited to, the U.S. Sarbanes-Oxley Act, the U.S. Health Insurance Portability and Accountability Act (HIPAA), the European Union Privacy Directive, and the Japanese Financial Instruments and Exchange Law ("J-SOX").
• An understanding of operating system internals and network protocols.
• Experience in application and system technology security testing.
• Project management skills and experience in creating and managing project plans, including budgeting and resource allocation.
• Strong analytical skills to analyze security requirements and relate them to appropriate security controls.

Honda is committed to the principle of equal opportunity in the workplace for all employees, temporary workers, contractors, applicants and visitors. Honda also encourages respect for the individual differences and talents of others while making full use of one's own abilities, based on Honda's philosophy of respect for the individual.

At Honda, we value and celebrate diversity and are committed to being a fair, non-discriminatory company that promotes and welcomes the uniqueness and differences of people around the world. We recognise that a diverse workforce allows for different ideas and perspectives, and we encourage everyone to share them. We strive to foster a culture of belonging that is consistent with Honda's core values and lived out in the way we work and respect each other. For us at Honda, diversifying our workforce means increasing its overall strength by providing people with equal opportunities - regardless of personal characteristics or previous careers.