It Security jobs in United Kingdom

IT Security Engineer – Risk/ISO 27001 – Birmingham

Hybrid working

1–2 days per week onsite – Salary up to 50k

Job Overview:
IT Security Engineer required for a leading client based in Birmingham. My client is seeking an IT Security Engineer to oversee the direction and management of IT risk and security for the client, coordinating responses to major cyber incidents. Leads a small team, owns the technical security roadmap, drives the execution of key activities, identifies new initiatives as needed, and collaborates closely with Information Governance.

Key Skills and Responsibilities:

1. Previous IT Security experience.
2. Comprehensive understanding of security principles, methodologies, and frameworks such as ISO 27001 and Cyber Essentials.
3. Extensive knowledge of risk and threat analysis/mitigation according to industry standards.
4. Proven experience in developing IT security processes and procedures.
5. Accountable for continuously enhancing the client's IT Risk and Security team, processes, and practices.
6. Provides strategic direction and leadership for all IT security initiatives, collaborating closely with both internal and external stakeholders.
7. Oversees the technical information security landscape, ensuring compliance with ISO 27001 standards and maintaining robust frameworks, methodologies, and practices to ensure secure and dependable IT services.
8. Effectively monitors and manages IT risk, conducting and supporting risk assessments and threat modeling efforts.
9. Remains informed of emerging security vulnerabilities and develops proactive defense strategies to protect the organization from potential threats.
10. Guides the development and implementation of the technical security roadmap and ensures timely execution of key actions.
11. Tracks IT risk trends and areas of concern, working with stakeholders to create and execute mitigation plans.
12. Administers the technical security policies and control frameworks, ensuring compliance with legislative, regulatory, and company policy standards.
13. Collaborates with and supports the Risk and Information Governance function to align with broader objectives.