Security & Technology Manager

Head of Security & Technology – National Company – Central Cardiff – £65,000 – £75,000 + Excellent bens

My client – A dynamic, market leading and importantly incredibly culture friendly organisation, are looking to appoint a seasoned Head of Security & Technology to join the Cardiff operation.

This requirement is a newly created role and is purely down to growth and a restructure across the “Tech Hub” of the company.

A quick insight into the role:

The role requires a professional strong technical background coupled with an in-depth knowledge of security systems and relevant regulations and legislation to assist in maintaining the confidentiality, integrity and availability information, products and systems.

*You will have extensive experience with a wide range of security technologies
*A solid understanding of Risk Management, The UK Data Protection Act, PCI DSS and ISO 2700x
*Experience of securing projects using security testing methodologies followed by management of results and remediation.

Main duties and responsibilities:

*Provide Information Assurance and consultative advice on principles and technologies in security engineering designs and implementation
*Directing the effective delivery of networks, development, and disaster recovery systems and processes
*Analyse existing and future systems, reviewing security architectures, and developing engineering solutions that integrate information security requirements to proactively manage information protection
*Directly manage and driven and experienced security and technical architects
*Researching and recommending new systems/products
*Apply security risk assessment methodology to system development, including assessing and auditing network penetration testing, risk analysis and risk treatment
*Analyse information security events, including threat model development and resulting security risk analysis of systems
*Provide expertise and support during systems upgrades, installations, conversions and file maintenance
*Provide expertise for systems development and enhancement and the integration of new systems with existing systems
*Communicate regularly with executive management and all users of information services and systems
*Develop standard operating procedures and best practices regarding information security, including providing written protocols and guidance to staff and to end-users
*Assess and mitigate system security threats/risks throughout program life cycles
*Conduct certification and accreditation planning and testing of products and systems
*Administer, prioritise, monitor, and as necessary conduct business as usual Information Security activities including incident investigation, response and reporting, third party security reviews, process and procedure improvements, tracking compliance to policies, risk analysis, architecture and design reviews, ad-hoc security queries, vulnerability scanning and management
*Work closely with the wider architecture and development teams to ensure security is built into products as per security requirements

Skills/attributes required:

*Experience of working at a Senior level, within an IT security function with a wide ranging knowledge of Information Security and IT Security frameworks and standards.
*Wide ranging knowledge of Information Security and IT Security frameworks, standards and application of best practice
*A good understanding of security tools including: vulnerability scanning, monitoring, physical security tools, protection, failover testing, pattern matching scanners, remote access technologies, authentication and authorisation techniques, network sniffing, forensic/disk management utilities and procedures and understanding of Data Loss Prevention
*Wide ranging knowledge on technology, its implementation in the corporate environment and best practice
*Varied IT experience including: ITIL, Hardware and Software architecture, SDLC, Operating systems and administration, Networking technologies (routing, LANs, WANs, Firewalls, VPNs, IDS/IPS, SSL, IPSEC, http/s, and wireless), AV, Active Directory, Virtualisation, Shared storage, Cloud and mobile technologies
*Experience in reviewing Information Security activities, including policies and procedures, then presenting findings concisely in verbal and written reports
*Extensive experience of various data security and compliance standards, including ISO 27001, PCI DSS, The UK Data Protection Act, etc. and its implementation across European countries

*Management of Third party vendors and suppliers.
*Highly organised with excellent communication skills.
*High levels of motivation.

Desirable skills:

*CISSP (Highly desirable)
*ISO 27001 LA or LI (Desirable)
*Other Information Security qualifications are beneficial and will be considered

This a fantastic opportunity with a market leading organisation – Incredibly lucrative growth is championing this hire.

For further information and to receive a full role profile, please apply immediately

Head of Security & Technology – National Company – Central Cardiff – £65,000 – £75,000 + Excellent bens

CPS Group (UK) Ltd is acting as an Employment Agency in relation to this vacancy.