Information Security Manager – Trainee Full Time

Adecco

Adecco Public Sector are partnered with the Security Industry Authority (SIA), the UK Government’s Arm’s Length body responsible for the regulation of the private security industry, in the recruitment of a Trainee Information Security Manager on a permanent basis.

The SIA have a statutory responsibility to license individual security operatives, as well as operating a voluntary scheme for organisations who supply such operatives. Data is an increasingly complicated and voluminous landscape, as a result of technology and population growth. The SIA have implemented a Data and Digital strategy to tackle the ongoing threats to our regime.

As they implement their strategy, it is fundamental that they strengthen their security maturity. They have made a fantastic start on this but there is still more to do, so require a trainee Information Security Manager to support colleagues across the organisation and help to minimise information/cyber security threat.

In addition to undertaking important work conducted with real purpose, the SIA can offer continued career growth and continuous professional development, a flexible, supportive and secure working environment and excellent benefits including 27.5 days holiday (rising to 32.5) and enrolment to the Civil Service Pensions Scheme (27-30% employer contribution). This role offers the opportunity for Hybrid working with attendance to the SIA’s London, Docklands office required.

What can you expect from the SIA?

• A welcoming and innovative work environment.
• Continued support and development opportunities.
• Access to training for attainment of recognised qualifications.
• A salary review upon successful completion of the recognised qualifications (12-18-month satisfactory performance history needed prior to the review).
• Flexible working.

What are we looking for?

We want our future team player to have an interest in information/cyber security or already be working in this arena with an interest in taking a next step up the career ladder. Given the evolving technologies, it’s vital our new team player is able to keep abreast of developments and changes in information/cyber security, as well as working in a fast-paced, but extremely exciting environment.

What you will be doing:

• Risk Assessment-. Work with colleagues to identify and manage information/cyber risks making organisational recommendations for improvements and mitigation.
• Policy Development – Lead on the development of information security policies, processes, and procedures.
• Policy Management – Lead on monitoring the effectiveness of our security policies and practices covering physical, procedural, and technical controls to ensure these are in keeping with external advice eg, National Cyber Security Centre (NCSC).
• Information Due Diligence and Assurance– Work alongside the Information Assurance team to support their assurance recommendations and investigation of security incidents.
• Security awareness and training– Work alongside the Data Protection Officer to mitigate information security risk and support staff awareness and training to shape the SIA’s cyber security culture.
• Knowledge and Expertise– Research and provide advice to all staff on some aspects of information security, helping to build the SIA’s information maturity around information security risk.
• Improvements – Lead on the successful implementation of an information security improvement plan.

What skills are we looking for?

• Can evidence a strong aspiration to working in Information/Cyber Security.
• Can demonstrate knowledge and management of risk.
• Experience in the writing of policies and procedures.
• Experience of writing reports to senior colleagues.
• Robust organisational skills with the ability to manage multiple tasks working to deadlines.
• Excellent communicator with strong verbal and written skills.
• Ability to interact at all levels of an organisation.
• Ability to work autonomously and manage projects/tasks through their life cycle to completion.
• Able to meet deadlines, prioritise and organise a busy schedule of work.

It would be great if you have experience in these areas:

• An understanding of IT networking, network security and the latest software security tools. ISF SoGP, NIST etc.
• Information Security industry qualification, or experienced individuals working towards these qualifications (ISO27001 Lead Auditor, CISA, CISM, CIPP, CISSP.)
• Has a sound understanding of cyber threat actors, malware and social engineering techniques.
• Experience of identifying, assessing, and controlling information security risk.

Application/Interview Process

To be considered, applicants are asked to provide a covering letter outlining their experience of the essential criteria listed above. Interviews are scheduled to take place on the 13th & 14th February via Teams