IT Security Manager

NQC As leaders in supply chain risk management solutions, we help organisations to achieve transparency, compliance and resilience with easy-to-implement technology.
View company page
NQC is a successful and growing software company specialising in supply chain risk management platforms. We’re in the ‘Tech for Good’ space, providing online web platforms which are in use by some of the largest organisations across a number of industries including the UK Government and the Automotive industry.Based in central Manchester, NQC offers a supportive working atmosphere within a diverse team of people. We work on a hybrid model and regularly meet up outside of the office for team socials and company events. This is an opportunity to contribute to globally recognised technology solutions used by major brands throughout the world and become part of an exciting long term plan for sustainability, and a better future.About your new roleAs part of our growth journey, we are looking for an experienced IT Security Manager to manage our IT Administration team and take lead on NQC's security practices and policies. The successful candidate will manage a small team of two infrastructure engineers and work closely with other teams to ensure the security of our software products and infrastructure.As an IT Security Manager you will be required to undertake the following responsibilities as part of your day to day activities:Design, implement and monitor Information Security and Cyber security policies and processesDeveloping, leading and managing the end-to-end planning, communication, training, delivery, assessment and continuous improvement of a consistent business risk-based Information Security and Cyber Security approach, that aligns to and supports wider business and customer requirementsDeveloping, managing and delivering Information Security projects from initiation to implementation with a continuous improvement and collaboration focusLeading and delivering operational Governance, Info Sec & Cyber Security aligned to industry Security practices and standards, contingency planning and incident response across the company, minimising incidents and adverse events, enabling safe, secure and compliant IT and business operations, compliant to ISO27001, Cyber Essentials and TISAX standardsBuilding, managing and monitoring activity and routine reports, raising awareness and adherence across the IT directorate and wider businessRepresentation on Customer Information Security groupsManaging third party web application PEN testing suppliersMaintain, analyse, and monitor cybersecurity threatsConducting security and data protection assessments with internal business units and external third parties to ensure ongoing security and data protection requirements are metAttending client calls as required for security assurance purposes or other related areasWorking with our commercial teams to complete Security and Data Protection assessments in a timely mannerManaging security incident response and continuous monitoring of effectiveness of the mitigation actions and outcomesProviding regular reports and updates to the Board of DirectorsRequirementsStrong working knowledge of data privacy laws, information security and industry best practices and how they might impact a software business like oursAbility to prioritise tasks, problem solve, work under pressure, and be a business partner to the company, ensuring that we balance our compliance and security goals against commercial needs, giving consultative information advice and guidance as necessaryProject management and presentation skills are keyStrong communication and collaboration skillsAbility to identify incident trends to elevate as requiredExperience of conducting information auditsIs consistently motivated, committed and able to perform duties in all situations.Persuades, influences and listens to others, using reason and co-operation to reach agreement.Communicates and receives ideas, views and information to achieve understanding.Gathers information from a range of sources. Analyses information to identify problems and issues andPlans and supervises activities and resources to maximise performance.Competitive salary
dependent on experience25 days holiday (Increasing with service)Flexible hybrid working policyHealth Cash PlanPrivate Company pension scheme24/7 Access to a Virtual GPLife Assurance (4 x Salary after probation period)Regular company socials and eventsPerkbox - Diamond access - giving you access to treats, discounts on retail and leisureEmployee Assistance Programme (mental health and stress support, counselling sessions)Explore more InfoSec / Cybersecurity career opportunitiesFind even more open roles in Ethical Hacking, Pen Testing, Security Engineering, Threat Research, Vulnerability Management, Cryptography, Digital Forensics and Cyber Security in general - ordered by popularity of job title or skills, toolset and products used - below.
#J-18808-Ljbffr