Michael Page Hiring for Operational IT Security Manager at Norwich Full Time

Delivering front line operational cyber security capabilities for the organisation. As a primary point of contact for cyber security issues across the organisation, you’ll have a pivotal role in building the organisation’s new operational security team. Expected to take ownership of cyber incidents, lead day to day cyber operations and look to improve and fortify the organisation’s capabilities, while shaping the team’s development.

Client Details

My client – world renown organisation in the Education and Training Sector industry are looking for an Operational IT Security Manager – join their site in Norwich remotely on an initial 6-month contract!

Description

The successful candidate for the Operational IT Security Manager – Education and Training Sector 6-month contract role will fulfil the following responsibilities:

Line-management of a team delivering operational IT security services for the institution and the role reports to the Assistant Director of IT Infrastructure Operations. Significant role within the IT Infrastructure Operations Group.

These frameworks include organisation and people, process and technology elements.

Sourcing appropriate log data from across the organisations IT estate. Access to this data will include working with other operational teams as they will have the required expertise in data extraction. Detailed responsibilities include:

• Manage digestion of log data from source systems into central log management.
• Manage the processing and correlation of system logs
• Maintain road map for future processing of logs to maximise coverage and work with other operational teams to create a plan.

IT Security Monitoring and Alerting

Monitoring of security log data in order to discover suspicious activity:

• Development of scripts and rules to highlight events needing investigation
• Create alerts/incidents of suspicious activity for further investigation.
• Collaborate in the maintenance and development of the organisations IT security monitoring systems (with the Information Security and Architect teams).

Incident triage and management

Leading the initial triage and initial investigation of suspicious activity:

• Process alerts and perform triage, so that security incidents are appropriately identified.
• Initial management of incident investigations and either bring these to a conclusion or hand over of the most serious incidents to the Information Security team.

Training & Awareness Delivery

Maintaining and improving awareness of cyber-security:

• Maintain training and awareness programme plan for delivery primarily to IT and by exception across the organisation.
• Work with relevant parties for delivery of specific training.

Patch Management

Monitoring and reporting on the overall patching status of IT systems across the IT estate

• Overall responsibility for the patch management process
• Working with IT Systems owners to ensure and maintain regular patching of all IT systems
• Create summary reports for senior management, including the Director of IT and IT Leadership Team on the overall patch status

Vulnerability Management

Mitigating the risks associated with system updates and patches across the IT estate:

• Overall responsibility for the vulnerability management process and collaboration with other operational teams in the collection of vulnerability data.
• Report vulnerabilities to operational teams and others, and work collaboratively to create a plan to address.
• Create summary reports for senior management, including the Director of IT and IT Leadership Team.

Accreditation Management

Maintaining the currency of the organisation’s accreditations:

• Maintain relevant accreditations (for example, cyber essentials, PCI).
• Create and manage on-going plans, in conjunction with other operational teams, to ensure current accreditations are maintained and new accreditations are achieved.

General

• Responsible for organising and planning activities for the team.
• Manage a team of technical experts and as team manager will be responsible for recruitment, setting and monitoring objectives, assigning work and managing performance of individuals in the team.
• Responsible for system design, selection and procurement of new specialist systems or services to support this area. This includes upgrades and maintenance of existing systems.
• Building an effective network both within the organisation and across the sector.
• Report to the Assistant Director of Infrastructure Operations who will set and monitor objectives. It is expected that there will be regular meetings to assign work and feedback on progress. The role-holder will be expected to work independently on agreed targets, ensuring that deadlines are met.
• Expected to make decisions within the assigned areas of responsibility; the role holder will have a significant contribution to decisions about the future strategy for Information Technology.

Profile

The successful candidate for the Operational IT Security Manager – Education and Training Sector 6-month contract role based in Norwich or remote will fulfil the following responsibilities –

Job Offer

6 month remote contract or based on site in Norwich.

Flexibility with how often you work on site every month/ fortnight (handful of times at most)

Contact Name: David Burrows
Reference:
TJ/9082/JN -012022-4582887_1642786071
Job ID:
3035134