IT Security Manager - SIEM/ISO 27001 - Birmingham

IT Security Manager – SIEM/ISO 27001 – Birmingham

Hybrid working

1–2 days per week onsite – Salary up to 60k

IT Security Manager required for a leading client based in Birmingham. My client is seeking an IT Security Engineer to oversee the direction and management of IT risk and security for the client, coordinating responses to major cyber incidents. Leads a small team, owns the technical security roadmap, drives the execution of key activities, identifies new initiatives as needed, and collaborates closely with Information Governance.

Key Skills and Responsibilities

• Previous IT Security Manager experience
• Possess or be in the process of obtaining a security certification, such as CISSP or CISM, with familiarity in ISO 27001, Cobit 5, ITIL, or other IT best practice frameworks.
• Comprehensive understanding of security principles, methodologies, and frameworks such as ISO 27001 and Cyber Essentials.
• Extensive knowledge of risk and threat analysis/mitigation according to industry standards.
• Proven experience in developing IT security processes and procedures.
• Accountable for continuously enhancing the client's IT Risk and Security team, processes, and practices.
• Collaborate with the Risk and Compliance team to oversee IT information security risks and offer guidance to the Senior Information Risk Owner (SIRO).
• Demonstrate strong understanding and hands–on experience with anti–malware, Data Loss Prevention (DLP), Security Information and Event Management (SIEM), and Intrusion Prevention/Detection Systems (IPS/IDS).
• Provides strategic direction and leadership for all IT security initiatives, collaborating closely with both internal and external stakeholders.
• Oversees the technical information security landscape, ensuring compliance with ISO 27001 standards and maintaining robust frameworks, methodologies, and practices to ensure secure and dependable IT services.
• Effectively monitors and manages IT risk, conducting and supporting risk assessments and threat modelling efforts.
• Remains informed of emerging security vulnerabilities and develops proactive defense strategies to protect the organization from potential threats.

Interested? Send your up–to–date CV to Dean Parkes at Crimson for review.