IT Security Manager

Job Description

Company description:J. Murphy & Sons Limited is a leading global, specialist engineering and construction company founded in 1951 that improves lives by delivering world-class infrastructure.Operating in the United Kingdom, Ireland and Canada, we provide better engineered solutions to infrastructure sectors including Transportation, Water, Power, Natural Resources, and Construction & Property.Headquartered in London, we also have a number of related businessesGround Engineering; Utility Connections; Murphy Plant; Urban Infrastructure; Murphy Process Engineering; Pipeline Testing Services; Specialist Welding Services; and Electrical Services.We are specialists in delivering pipelines; design; marine; structural steel; tunnelling; fabrication; bridges and piling; and invest heavily in our substantial holding of plant; equipment and facilities.Murphy employs around 3,500 engineers, professional managers and skilled operatives around the world. Together, we work as One Murphy by directly delivering the people, plant and expertise needed to make projects a success.Theres more to Murphy.Job description:IT Security ManagerKentish Town, Warrington, Cannock, Leeds (Flexible on Location)Currently ranked as the UKs 3rd best big company to work for J. Murphy & Sons have an exciting opportunity for a IT Security Manager to join the team. This is pivotal role in the business, information and cyber security is of critical importance to Murphyto ensure its continuous growth and success. As the IT Security Manager you will provide IT security leadership and strategic direction for the IT function and be the overall advocate for Information Security best practice across the business, communicatingthe value of Information Security throughout all levels of the organisation.What you will be doing

• Working closely with the IT Leadership team to promote security best practice across the IT organisation, embedding this in the work undertaken.
• Forms a centre of excellence for information security management, offering internal management advice and practical assistance on information security risk and control matters throughout the organization and promoting the commercial advantages of managinginformation security risks more efficiently and effectively.
• Integrate information security governance into corporate governance to ensure organisational goals and objectives are supported by the information security programme. Provide compliance and governance support to business areas on regulations and requirementsfor information security, data protection and GDPR.
• Working with internal and external security forums, actively advise senior management on risk levels and security posture.
• Actively promote the continuous improvement of the business information and cyber security profile.
• Leads the design, implementation, operation and maintenance of the Information Security Management System based on the ISO/IEC 27000 series standards, including certification against ISO/IEC 27001.
• Manage the necessary compliance activities, including penetration tests and ISO27001 / Cyber essentials accreditation and manage internal and external Information Security audits as required.
• Work closely with technical teams and trusted suppliers to assure the organisations Information Security techniques and services are implemented to best practice standards and performant.
• Develop and manage supplier due diligence to identify risk and impact of supplier/service/products including DPIA and cloud service provider assessments as required.
• Attend the weekly change advisory board to ensure that all changes are reviewed from a security perspective and advise on practical amendments required to meet the business information security requirements.
• Ensure that cybersecurity requirements are integrated into IT services designs including the service continuity planning and arrange testing of the disaster recovery plans.
• Identify security incidents and provide leadership in investigating and recommending remediation, working with internal and external parties as required. Working with the IT team to address the root cause issues.
• Manage and track audit findings and recommendations to ensure that appropriate mitigation actions are taken.Ensure that plans of actions and milestones or remediation plans are in place for vulnerabilities identified during risk assessments, audits, inspections,etc.
• Maintain IT Security leadership engagement with the SOC/SEIM provider through regular service management meetings, identifying any key issues for remediation.

Who we are looking for

• Qualified in one of the following; CISMP, CISM or CISSP.
• Demonstrable experience in information security management and/or related functions (such as IT audit and IT Risk Management)
• Excellent practical working knowledge of security standards - ISO27001 and Cyber Essentials
• Strong communication skills with the ability to translate technical IT aspects into user friendly language
• Good Knowledge of the business process and the benefits that security technologies can bring to the organisation.
• Working experience with 3rd party SOC and SIEMs.
• Office 365 / Azure Security Administration