IT Security Manager

Job Title: IT Security Manager

Location: Bristol - Hybrid Working 3 days per week onsite

Salary: £60,000 - £65,000 + benefits

Are you an experienced IT Security Manager looking for your next challenge? If so, this could be the ideal opportunity for you. My client, a specialist retail business with an excellent reputation, is currently investing within their IT Security team. As part of this investment, they are looking to hire an IT Security Manager to head up their IT Security function.

Working closely with the Head of IT, you will have responsibility for all things IT Security within the business. You will be responsible for scoping, implementing, monitoring, and maintaining IT security systems, ensuring compliance standards, strategy, and reporting is carried out across all parts of the group. You will be supporting the IT team and the business by being a trusted advisor in all aspects of IT security and IT compliance, delivering pragmatic, high-quality, secure, cost-effective security solutions.

Key Responsibilities

• Ensure IT Security meets the standards required by the business.
• Ensure IT Security systems are secure and fit for purpose.
• In conjunction with the Head of Technology, set objectives, establish priorities, and develop plans.
• Prepare and present proposals and benefits cases for senior management review on a monthly ongoing basis within an annual planning horizon.
• Implement approved proposals, managing functional input, where appropriate.
• Scope, implement, monitor, and maintain IT Security systems.
• Support the wider IT team and the business by being a trusted advisor for all IT security and IT compliance matters.
• Perform due diligence and sign-off for all IT Security and Compliance related matters.
• IT Security patching strategy, reporting, and compliance.
• Ensure IT Security and compliance systems are developed and maintained to the highest possible level.
• Adhere to and liaise with Group Internal and External Audit requirements and standards.
• Maintain external IT Security certifications as required by the business.
• Define the IT Security strategy.
• Implement and maintain information security policies and procedures.
• Complete regular vulnerability scanning and required remedial actions.
• Ownership of the phishing strategy, campaigns, communications, and remedial actions.
• Create and maintain appropriate documentation and standards.
• Maintain third-party vendor, hardware, and software relationships related to IT Security.
• Ensure quality standards are adhered to by self and fellow members of the team.

Skills and Experience Required

• Proven background within a similar stand-alone IT Security Management or Lead role.
• Excellent IT security knowledge (CISM, NIST, etc).
• Working knowledge of GDPR and PCI-DSS.
• Hands-on approach.
• Excellent team leadership skills (communication, prioritisation, delegation, planning, etc.).
• Quality of work - Demonstrates a high degree of attention to detail, thoroughness, and a methodical approach to work. Works at a pace that matches the requirements of the business and recognises the importance of timely completion of tasks.
• Communication & interpersonal skills - Ability to listen and understand information. Presents information in a clear and concise manner to both technical and non-technical people. Knows the appropriate way of communicating with customers, peers, and line managers. Demonstrates respect for all individuals in all forms of communication. Treats people fairly and courteously regardless of background or culture.
• Initiative - Monitors and manages own time to ensure daily and long-term objectives are met. Develops and improves procedures in agreement with line manager. Accepts additional challenges and responsibilities willingly and assists others.
• Self-reliance. Captures cross-departmental analysis and detailed feedback from the Management team for review.
• Planning & organisation - Adapts to changes and uses resources effectively. Able to prioritise and execute competing activities and prioritise and delegate effectively.
• Budgetary competence.
• Demonstrable knowledge of the operational ITIL Service Management framework.
• Experience developing solutions based on best-of-breed products.
• Key vendor and/or relevant industry standard qualifications e.g., CISSP, CISM, CompTIA Security (desirable).