IT Security Lead - Privileged Access Management (PAM)

IT Security Lead - Privileged Access Management (PAM)

Full Time/Permanent

£55,000 - £65,000 + generous bonus scheme and genuine market leading benefits package

West Midlands/Hybrid (80% home working)

The Company

My client is a large and nationally recognised financial services business who are known for being one of the UK's 'great places to work', having won multiple awards.

They are headquartered in the West Midlands and offer very good remote/flexible working options with the successful candidate ideally coming into the office once a week on average.

The Role

We are looking for a driven IT Security professional to join the rapidly growing internal Security team with the successful candidate being primarily on privileged access management (PAM) and assurance.

Responsibilities

1. Ensure the effective management and mitigation of information and IT security risks.
2. Play a key role in assessing risks, implementing controls, analysing data and producing MI to ensure compliance with group and regulatory requirements.
3. Perform third party governance and controls assurance.
4. Drive and monitor risk management activities aligning with group policies, frameworks, industry standards, and regulatory requirements.
5. Identify, recommend, and implement IT security controls to mitigate risks, ensuring alignment with the IT Strategy and regulatory requirements.
6. Coordinate and manage audit activities ensuring consistent and timely responses to audit requirements, improving departmental compliance.
7. Develop and manage regular reporting of IT Security risks, issues, controls, and audit positions for senior IT managers.
8. Execute and interpret MI reporting and key supplier performance, recommending enhancements for continual improvement.

Skills and Experience

1. Proven experience in a similar IT Security position ideally with a focus on/keen interest in identity access management (IAM) or privileged access management (PAM).
2. Must have strong stakeholder engagement skills combined with meticulous attention to detail and the ability to build relationships and communicate effectively.
3. Experience in IT risk management, control, and audit experience, particularly related to security.
4. Experience performing risk and control-based reviews, particularly related to security.
5. Demonstrable understanding of ISO 27001 and/or other security standards.
6. Experience in analysis of requirements, data and MI, as well as ability to produce MI and reports.
7. Recognised Information Security certification (eg, CISSP, CISM, CRISC)/a willingness to obtain would be desirable but is not essential.

Please apply via the link or contact (see below) for more information.