This list contains only the countries for which job offers have been published in the selected language (e.g., in the French version, only job offers written in French are displayed, and in the English version, only those in English).
As the Security Manager, you will be part of an InfoSec team that manage the delivery of security & accreditation to the NEC business and our customers. The Security Manager will produce the required security assurance documentation that is required for the accreditation of our customers. The role will contribute to the accreditation programme by supporting the arrangement of security testing, producing remediation plans and driving the remediation of identified vulnerabilities. The Security Manager will also provide written contributions to the procurement bids and security questionnaires. The Security Manager will support the wider InfoSec team in responding to security incidents. You will also be expected to issue security advice and guidance to the rest of the business. The role is primarily home based with an expectation that travel to NEC offices will be required on an ad-hoc basis.
Job Responsibility:
Provide consistent and qualified responses to tenders and assurance questionnaires from customers
Produce and maintain security assurance documentation required for accreditation
Ensure compliance with relevant security standards, service management procedures, regulations, and industry best practices
Schedule security testing and create remediation plans from the test reports
Contribute to process documentation and policy review
Conduct security assessments and audits on people, process and technology within NEC
Assist in security incident management and vulnerability management
Requirements:
Demonstrable Experience in an IT role, with a strong understanding of security concepts/fundamentals
Proven experience working in an IT security role
Strong knowledge of cybersecurity frameworks, standards, and regulations
A good understanding of an approach to risk management
Experience in writing comprehensive responses to security questionnaires or bids
A strong focus on business outcomes
Strong and demonstrated team working experience
High degree of personal motivation and ability to self-manage
Ability to communicate security and technical solutions to non-technical or security resources
Comfortable with collaboration, open communication and reaching across a range of functions and teams
Excellent verbal and written communication skills
Candidates must be security cleared (or able to gain clearance) to Non-Police Personnel Vetting Level 3 (NPPV)+SC
Nice to have:
Delivering pragmatic security assurance documentation aligned to varying degrees of risk appetite
Exposure to security testing process and reports such as penetration testing
Experience working within a shared environment with multiple tenants and requirements
Experience in working on solutions or projects that require formal independent accreditations
Working knowledge of Cyber Essentials Plus
What we offer:
Private Medical Cover funded by NEC for Employees
25 days paid holiday with the option to buy/sell
4 x basic salary life assurance cover funded by NEC
A Group Pension Plan with fantastic employer contributions up to a maximum of 8.5%
A selection of flexible benefits to suit your individual needs