Information Assurance Security Manager

Information Assurance Security Manager

Contract London Day rate: £500 - £650 inside IR35

We're currently seeking an experienced and ambitious Information Assurance Security Manager to work with our exceptional client, a world-class brand in a secure environment to support major challenging and highly rewarding projects across this complex organisation.

This contract role will require you to conduct security clearance prior to assignment. This opportunity is based in London.

You will be responsible for the establishment and maintenance of an information assurance framework and associated security documentation, whilst remaining aligned to corporate information security management policy and organisational goals. The role is responsible for the protection of information assets by identifying, evaluating and reporting on information assurance framework controls and information security risk in a manner that supports compliance, governance, regulatory requirements and the overarching risk posture of the enterprise.

Responsibility as the local SME on security policy and procedures for the assigned environments. Single point of contacts for all local security queries.

Hosting of a monthly information assurance meeting and tracking of meeting outcomes.

Tracking and reporting of security-related defects and issues for the systems and services within area of responsibility.

Attendance on change approval boards to provide oversight/approval of changes from a security perspective in liaison with security personnel.

Key responsibilities:

1. Maintenance of information assurance framework controls dashboard.
2. Conduct internal information assurance compliance audits and management of outcomes.
3. Continual assessment of vulnerabilities for the systems and services within the areas of responsibilities.
4. Assessment of security, legal, regulatory and data management related risks.
5. Maintenance of accreditation status for assigned systems in liaison with accreditor/s.
6. Responsible for the scoping, planning and conduct of IT Security Health Checks (ITSHC), remediation planning, and the tracking and resolution of findings.
7. Maintenance of risk registers, risk escalation, and mitigation of information security risk to within organisational acceptable levels.
8. Implementation of agreed NIST CSF/800-53 framework control objectives.
9. Monitoring of agreed system and service framework control objectives across multi-disciplinary teams and external suppliers.
10. Ongoing maintenance and update of information assurance documents and supporting artefacts.
11. Production of security KPI's, metrics and reporting for system accreditor/s and senior risk owner/s.
12. Contribute to the creation, ongoing review and update of information security policy and procedures.
13. Liaison with senior stakeholders and technical support teams to ensure the prioritisation and mitigation of security related risks and issues.
14. Fostering and maintenance of relationships between asset and risk owners, senior business representatives, technical teams, security specialists, data management teams and information assurance framework owner/s.
15. Management of information security incidents on behalf of the business, in liaison with security SME's, information security specialists whilst effectively communicating with senior stakeholders.
16. Provision of information security, information assurance and assurance framework, related training and awareness to delivery teams, project managers and wider business areas.

In return:

You'll be joining an ambitious, high-level team of like-minded and highly skilled individuals, all focused on delivering the best possible outcome.

As an organisation and as a team, Guidant Global are committed to fostering an equitable, diverse and inclusive workplace, where every employee and contractor feels valued and empowered throughout their time with us.

We actively seek to recruit talent from all backgrounds, and to draw on a rich blend of experiences, perspectives and creativity. We believe that when people are respected and included, they are motivated to bring their best and whole selves to work, leading to innovative solutions and exceptional outcomes for all parties.

If you're ready for a challenge like no other, please apply today.