Information & Cybersecurity Assurance Manager

Qualifications

• Either hold, or have held: ChCSP, CISM, CISA, BCS CISMP, or CMIRM certification
• Membership of a Cybersecurity or Information Risk Management professional body such as, but not limited to, CIISec and IRM
• Must be able to hold National Security Vetting at SC or above, with a minimum unbroken UK residency of at least 5 years to be eligible to apply for National Security Vetting
• Experience
• Comprehensive and demonstrable experience of working in a Defence Secure by Design programme or project, particularly as a Delivery Team Security Lead, Delivery Team Security Engineer, or Security Assurance Coordinator Role
• Proven ability to deliver security artefacts such as, but not limited to, Security Management Plans, Risk Registers and Risk Assessments, Security Requirements Documents, Security Aspects Letters, Threat Models and Vulnerability Assessments, Security Architecture Documents, Compliance & Audit Reports, and Incident & Recovery Plans
• Experience in the assurance or implementation of information or cybersecurity management systems that have achieved certification to ISO 27001, CE+, or DCC standards
• Experience in facilitating, coordinating, and directing ITHCs including, but not limited to, the writing of Security Requirements Traceability Matrix or Scoping Document, as well as the prioritisation of remediation effort
• Proficient technical understanding of information systems at an architecture, design, and audit level

Knowledge & Skills