Lead Information Security Engineer/Architect. in Chesterfield

Lead Information Security Analyst/Engineer to £55k + Benefits

Do you have a background working in an IT Security function? Do you have a broad technical skill set and are able to identify and remediate threats or vulnerabilities, implement information security strategies to mitigate risk, and put processes in place to alleviate security issues? Do you have a background in Governance and maintaining up-to-date policies and procedures?

Are you passionate about technology, with a strong customer service ethos, focused on keeping abreast with Information Security Management frameworks and standards (ISO27001, COBIT, ITIL)?

About the company:

Do you want to be part of a successful organisation that strives to offer stable, sustainable, and thriving communities in their local area? They have a vision and purpose to make a difference by the services they offer across a variety of services in their local area. With offices based in Chesterfield, they are involved in a major transformation within the local area. They are investing in improving their services to best meet the changing needs of their customers/users.

About the role:

The Security Engineer/Analyst role will be office-based in their Chesterfield office (on average 3 days per week), working as part of a small team, providing effective solutions to escalated security issues, and providing a high level of security expertise to the business, across information systems, networks, and data. You will primarily be focused on playing a critical role in developing and implementing information security policies, strategies, and procedures to help safeguard their digital assets and mitigate against potential risks. You will be actively responsible for ensuring the successful achievement of external certifications such as ISO27001, MOU, PSN, and PCI-DSS alongside managing security incident response plans. In addition, the Lead Information Security Analyst/Engineer will provide advice and guidance on government standards and industry best practice relating to information security and maintain compliance with these standards.

Key Responsibilities:

• Oversee information security, compliance, and risk management practices following industry frameworks.
• Take ownership of and establish information security policies, standards, and procedures ensuring confidentiality and integrity.
• Conduct regular risk assessments to identify security vulnerabilities and potential threats and implement strategies to mitigate risk.
• Implement plans and protocols to respond to security issues.
• Educate other colleagues and employees in security awareness programmes/training sessions in relation to security compliance and best practice.
• Maintain and develop good working relationships with 3rd party suppliers ensuring they meet security standards.
• Monitor events/alerts from multiple technologies to detect potential malicious activity.
• Ensure effective compliance with relevant laws, regulations, and industry standards such as GDPR, ISO27001, PCI-DSS etc. by conducting audits, maintaining documentation etc.
• Support the Head of Digital, Data and Technology to develop, monitor, and report on budget that is in line with business & financial objectives.

Essential Skills:

• Comprehensive knowledge of Information Security Management systems and ability to scope, design, and implement such systems.
• Previous experience in ICT infrastructure, application, and Cloud/SaaS technical skills.
• Knowledge & understanding of ISO 27001, ITIL and ideally Prince 2 methodology.
• Leadership qualities to lead a workforce and enhance their information security knowledge.
• Ability to deal with high complex/risk problems across a diverse range of security threats.
• Good knowledge of IT Security Principles.
• All-round experience of vulnerability management, information security incident management alongside IT Service and Asset management systems.
• Any formal Security qualification or Degree will be advantageous.

Benefits:

• Basic salary of up to £55k on offer.
• Pension - 20% company contribution.
• Training opportunities.
• Child vouchers, discounted leisure, and travel scheme.
• 32 days holiday plus bank holidays.
• Hybrid working (2 days per week from home).
• Flexible working hours.

Candidates will have a strong customer service ethos and passion for resolving issues to a high standard following company guidelines. Candidates will have a broad technical skill set and be keen to look at learning new technologies including and have an interest in emerging security technology. The Security Engineer role offers the chance to play a leading role in this organisation's information security set-up and contribute your own ideas (within best practice) to enhance and sustain their Information Security Management. You will be given the opportunity to learn and progress within the organisation and make an impact with their Information Security environment.