Information Security Manager in Aberdeen

Sword is a leading provider of business technology solutions within the Energy, Public and Finance Sectors, driving transformational change within our clients. We use proven technology, specialist teams and domain expertise to build solid technical foundations across platforms, data, and business applications. We have a passion for using technology to solve business problems, working in partnership with our clients to help in achieving their goals.

We are excited to announce that we are looking for an experienced Information Security Manager to join the security team. Reporting directly to the CISO, and working directly with the IT Team, you will be responsible for the implementation and delivery of Sword’s cyber security strategy and program.

• The Information Security Manager is primarily a technical role and will be required to operate with high levels of autonomy, effectively translating business objectives and risk management strategies into specific IT security processes enabled by security technologies and services.
• Security Operations - Implement and oversee the day to day running of security including M365 Security (Sentinel, Defender, Conditional Access) and Azure security protocols.
• Vulnerability Management – Proactive and risk-based vulnerability management including attack surface management, system hardening, and cloud security posture management.
• Service Management – Ability to deliver security as a cohesive service through a combination of internal resources and external service providers.
• Incident Response – Oversee security incident management and drive enhancements to risk mitigation strategies through ongoing assessments.
• Security Culture – Drive improvements in the internal security culture through ongoing awareness, training, simulated phishing campaigns, and security champion’s network.
• Security Governance – Develop and refine security policies, frameworks, and procedures, maintaining alignment and accreditation ISO 27001 and Cyber Essentials Plus.
• Risk Management – Support security risk assessments across vendors, projects, and internal teams, identifying areas of concern and driving remediation efforts.
• Regulatory & Client Requirements – Ensure Sword remains technically compliant with relevant legal, client, and regulatory obligations, keeping pace with evolving security landscapes.
• Third-Party & Supply Chain Security – Assess and manage technical security risks related to suppliers and partners, ensuring robust security measures are maintained.
• Continuous Improvement – Deliver the security program through a series of continuous and incremental improvements.

This is a challenging and rewarding role that offers the opportunity to work with a talented team and help our clients as they continue their Digital Transformation journey. If you have a passion for technology and enjoy leading and mentoring technical teams, we encourage you to apply for this role.

• Microsoft security architecture and technologies including EDR, Firewalls, SIEM, Microsoft Purview (including Data Labels, Protection, and DLP), IAM, and Email Security.
• Managing IT security infrastructure e.g., firewalls, intrusion prevention systems (IPSs), web application firewalls (WAFs), endpoint protection, SIEM, vulnerability management, Data Loss Prevention (DLP), Email Security, Identity and Access Management.
• Cyber Security Frameworks (NIST), regulations such as the General Data Protection Regulations (GDPR) and Network Information Systems (NIS2), and industry standards such as ISO 27001.
• Experience designing the IT security requirements related to the deployment of applications and infrastructure.
• Running security awareness campaigns including regular business updates, simulated phishing campaigns, and security training.
• Significant experience in a similar role preferably in an international organisation including working with a range of IT and IT security specialist suppliers.

• Major industry certification such as CISSP, CISM, CRISC, etc.
• Certification in relevant Microsoft security technologies.
• Take ownership and accountability with a positive can do attitude including an ability to self-manage tasks and activities to consistently deliver results.
• Dedicated and proactive learner who keeps up to date with security trends and is continuously improving and refining skills.
• Excellent communication, negotiation and influencing skills – able to influence operational effectiveness across an organisation to achieve results.

At Sword, our core values and culture are based on caring about our people, investing in training and career development, and building inclusive teams where we are all encouraged to contribute to achieve success.

We offer comprehensive benefits designed to support your professional development and enhance your overall quality of life. In addition to a Competitive Salary, here's what you can expect as part of our benefits package:

• Personalised Career Development: We create a development plan customised to your goals and aspirations, with a range of learning and development opportunities within a culture that encourages growth.
• Flexible working: Flexible work arrangements to support your work-life balance. We can’t promise to always be able to meet every request, however, are keen to discuss your individual preferences to make it work where we can.
• A Fantastic Benefits Package: This includes generous annual leave allowance, enhanced family friendly benefits, pension scheme, access to private health, well-being, and insurance schemes.

At Sword we are dedicated to fostering a diverse and inclusive workplace and are proud to be an equal opportunities employer, ensuring that all applicants receive fair and equal consideration for employment, regardless of whether they meet every requirement. If you don’t tick all the boxes but feel you have some of the relevant skills and experience we’re looking for, please do consider applying and highlight your transferable skills and experience. We embrace diversity in all its forms, valuing individuals regardless of age, disability, gender identity or reassignment, marital or civil partner status, pregnancy or maternity status, race, colour, nationality, ethnic or national origin, religion or belief, sex, or sexual orientation. Your perspective and potential are important to us.

If we can do anything to help make the hiring process more accessible, please let our talent acquisition team know when you apply so we can support any adjustments.