Ref: KB75
Role: Cyber Security Officer
Location Bristol/Hybrid
Salary: £50,000
First Military Recruitment are partnering with a leading Tech business, who support government contracts, looking to bring in a new and experienced Cyber Security Manager to their medium size business.
In this Cyber Security Manager role you will be furthering the development of their security stance, ensuring they continue to meet their existing compliance obligations while improving the business defences, supporting staff and delivering for customers.
You will have a Cyber Security background, sound knowledge of cloud infrastructure and compliance frameworks, and has the ability to explain technical issues to none technical individuals.
Your duties as a Cyber Security Manager:
- Monitor security intelligence sources, including vendor notifications, security announcements, and internal system alerts.
- Respond to incidents, triage effectively, and provide clear communication to internal and external stakeholders, including responding to customer questions.
- Oversee access control, assist with the secure configuration of systems, and ensure accurate, up-to-date documentation is available for staff and customers.
- Support service owners in applying appropriate security controls.
- Manage compliance obligations, including maintaining ISO certifications, Cyber Essentials, and handling external audits.
- Ensure that policies and processes benefit the business without unnecessary bureaucracy.
- Identify and implement improvements in our security processes, from internal drills and staff training to refining incident response procedures and reporting mechanisms.
- Regularly review and update security documentation to reflect current best practices.
The Ideal candidate for this Cyber Security Manager:
- Has a Cyber Security Background
- Have a solid understanding of what operating and securing a cloud infrastructure environment looks like
- Knowledge of operational aspects, cost considerations, functionality, and identifying and mitigating risks.
- You should know what safely integrating and operating third-party cloud services (SaaS) entails
- A working knowledge of compliance frameworks, particularly ISO27001 and its associated ISMS, is essential. Experience with other frameworks, such as Cyber Essentials, would also be beneficial