Senior Information Security Manager

The Senior Information Security Manager works at a strategic level as the point of escalation for clients, operational teams, and the ISMs reporting to them. They are responsible for the development and maintenance of organisational policies, products, and methodologies to manage and reduce information security risk and to drive continuous improvement. Share best practice and drive the development of the ISM and ISA population.

1. Lead the security engagement and be the main security point of contact across a broad sector within Capita to ensure effective security management.
2. Ensure delivery against any client information security requirements.
3. Provide SME security support into business operations and change initiatives.
4. Provide oversight and input on information security related risks across designated remit.
5. Reporting on information security at internal and client facing risk committees and meetings (e.g. SWG).
6. Contributes to development of cyber security policies, standards, and supporting material.
7. Pro-active management of risks by sharing best practice in the external marketplace and applying it within Capita.
8. Provide strategic risk guidance for IT and non-IT projects, including the evaluation and recommendation of technical and non-technical controls.
9. Security review/input of bids proposals, RFP security responses, client exits, and new business transitions.
10. Conducting investigations, analysis, and review following breaches of Information Security controls and preparing recommendations for appropriate control improvements, involving other professionals as required.
11. Supporting security related internal and client audits.
12. Providing support and input into obtaining and managing security certifications (e.g. PCI, ISO27001, etc).
13. Will be an expert specialist or manage a team of Security ISM and IS Analysts on assigned client engagements.