At a Glance
- Tasks: Lead risk management and IT security governance in the energy sector.
- Company: Join a leading company innovating the future of energy with a focus on safety and efficiency.
- Benefits: Enjoy flexible hours, hybrid working, and up to £75,000 salary plus bonuses.
- Why this job: Be at the forefront of cybersecurity while making a real impact in the energy industry.
- Qualifications: Knowledge of ISO27001 and IT security qualifications like CISSP required.
- Other info: Must have lived in the UK for 5 years for security clearance eligibility.
Are you an experienced Information Security Manager looking for your next challenge? I'm currently working with a leading company in the energy sector who are looking for a Information Security Manager to join the team and lead them through a number of new projects. They are looking to innovate and drive the future of energy, ensuring safety, security, and efficiency in everything they do. As the Information Security Manager you will oversee the risk management and IT security governance. In this role, you'll develop and implement security processes and policies, ensuring their systems are secure and compliant with industry standards. What you'll do: Manage risk and IT security governance, including compliance with standards like ISO27001. Conduct technical and non-technical risk assessments and monitor compliance with security policies. Lead internal and external audits, ensuring timely resolution of any issues. Develop business continuity plans, working with emergency planning teams. Regularly review and update security policies and procedures. Manage relationships with security vendors and contractors. Support the delivery of security regulatory and project assurance. Continually improve security processes and compliance initiatives. Deputise for the Head of Cyber Security when needed.What you'll need: Knowledge of information security risk management (e.g., ISO27001). IT/IS security qualifications such as CISSP. Certified Information Systems Auditor (CISA). Experience with ISO27001, ISO27002, and GDPR. Understanding of security controls and their effectiveness. Familiarity with assurance frameworks. Experience in delivering information security certification and maintaining compliance. Experience in creating and reviewing IS security policies. High-level understanding of operational technology systems and their risks. Ability to obtain UK security clearance and have been a UK resident for 5 years or more.What you'll get: Up to £75,000 salary DOE. Annual bonus up to 15%. Flexible hours and hybrid working. Up to 12% Employer contribution pension. 25 days holiday (increases with service). Car allowance/company car scheme. And many more such as healthcare, course fees etc.Clearance Requirements: Due to the nature of this role, the successful candidate must be eligible for security clearance. To qualify, you must have lived permanently in the UK for 5 years or more. If you meet a handful of the above requirements and are interest in the role then please apply and I will be in touch shortly to discuss the role in more detail. To find out more about Computer Futures please visit Computer Futures, a trading division of SThree Partnership LLP is acting as an Employment Business in relation to this vacancy | Registered office | 8 Bishopsgate, London, EC2N 4BQ, United Kingdom | Partnership Number | OC(phone number removed) England and Wales
Cyber Security Manager - Governance & Risk employer: Computer Futures
Contact Detail:
Computer Futures Recruiting Team
StudySmarter Expert Advice 🤫
We think this is how you could land Cyber Security Manager - Governance & Risk
✨Tip Number 1
Make sure to highlight your experience with ISO27001 and other relevant standards during your conversations. This will show that you have the necessary knowledge for managing risk and IT security governance.
✨Tip Number 2
Familiarize yourself with the company's current projects and initiatives in the energy sector. Being able to discuss how your skills can contribute to their goals will set you apart from other candidates.
✨Tip Number 3
Network with professionals in the cybersecurity field, especially those who have experience in the energy sector. They might provide insights or even referrals that could help you land the job.
✨Tip Number 4
Prepare to discuss your approach to developing and implementing security processes and policies. Be ready to share examples of how you've successfully managed compliance and improved security initiatives in previous roles.
We think you need these skills to ace Cyber Security Manager - Governance & Risk
Some tips for your application 🫡
Tailor Your CV: Make sure your CV highlights your experience in information security management, particularly focusing on risk management and compliance with standards like ISO27001. Use specific examples from your past roles to demonstrate your expertise.
Craft a Strong Cover Letter: In your cover letter, express your enthusiasm for the role and the company. Discuss how your skills align with their needs, especially in developing and implementing security processes and policies. Mention any relevant certifications like CISSP or CISA.
Highlight Relevant Experience: When detailing your work history, emphasize your experience with technical and non-technical risk assessments, leading audits, and managing relationships with security vendors. This will show that you have the practical knowledge they are looking for.
Showcase Continuous Improvement: Demonstrate your commitment to continual improvement in security processes and compliance initiatives. Provide examples of how you've successfully implemented changes in previous roles to enhance security measures.
How to prepare for a job interview at Computer Futures
✨Showcase Your Knowledge of ISO Standards
Make sure to highlight your understanding of ISO27001 and other relevant standards during the interview. Be prepared to discuss how you've implemented these standards in previous roles and the impact it had on risk management and compliance.
✨Demonstrate Risk Assessment Experience
Be ready to share specific examples of technical and non-technical risk assessments you've conducted. Discuss the methodologies you used and how you monitored compliance with security policies, as this will show your hands-on experience in the field.
✨Prepare for Audit Scenarios
Since leading internal and external audits is a key responsibility, think of past audit experiences and be prepared to discuss how you resolved issues that arose. This will demonstrate your problem-solving skills and ability to ensure compliance.
✨Discuss Business Continuity Planning
Talk about your experience in developing business continuity plans and working with emergency planning teams. Highlight any successful initiatives you've led that improved organizational resilience, as this is crucial for the role.