Operational Security Manager

Are you a security manager looking for your next challenge?
We are currently looking for two operational managers to join our very well-established team in our Aerospace, defence and security sector.
In this role, you will be responsible for implementing the strategy, policies and working practices defined within the Information Security Management System for the assigned client(s).
We can offer great career progression opportunities, ability to be based anywhere across the UK, benefits which you can flex to meet your needs and training and development opportunities.
**What you will be doing**:

- Implement the strategy, policy and working practice defined within the ISMS for the assigned client(s).
- Provide regular reporting to assess the effectiveness and operation of the ISMS Manage and maintain security operations in line with the organisation's Security
- Policy and Standards and Industry Best Practices
- Understand the clients key objectives and advise on areas for improvement
- Review and manage security risk and threat assessment (operational and system)
- Engage with internal stakeholders and 3rd party service providers on matters of information security, risk and privacy
- Manage and respond to all security related incidents, developing strong internal and external relationships to promote the early identification and resolution of incidents
- Proactively manage threat detection and vulnerability management services and lead required remedial activities
- Represent security considerations through assessment and triage of IT & process change
- Manage 3rd party provision of security resource supporting the OSM activity.
- Engage as security expert (consult) with major programmes and change requests
- Maintain ISMS, Operational Security and Risk Assurance Documentation set for assigned client(s)
- Provide timely monthly management reporting on the security posture and performance of key suppliers, and analysis of security related incidents
- Attend and support Stakeholder meeting
- Lead monthly client Security Working Group meetings
- Ensure Operational Security are audit ready and provide support to audits (both internal and external)
- Be responsible for the implementation of Sopra Steria and client Risk Management methodologies
- Contribute ideas and support initiatives to the wider Sopra Steria Security function

**What you’ll bring**:

- Operational Security Manager experience with strong knowledge and experience with security policies and standards
- Technical aptitude and knowledge across the spectrum of information security solutions and operations
- Knowledge of IT security solutions and their integration and operation into business systems and processes
- Experience of security maturity and developing roadmaps aligned to the priorities of clients
- Experience of building relationships with senior internal and external stakeholders
- Experience of ISO/IEC 27001 Compliance and Certification
- CISSP, CISA or CISM certified or equivalent degree in Information Security

**Desirable Skills**
- Police or public sector experience would be an advantage
- Experience of PSN compliance
- Experience of managing external third party assessments and relationships

**If you are interested in this role but not sure if your skills and experience are exactly what we’re looking for, please do apply, we’d love to hear from you
Employment Type: Permanent
Location: UK Mobile
Security Clearance Level: SC
Internal Recruiter: Marion Chassua

**Salary**:£55000 - £65000
Benefits: 25 days annual leave with the choice to buy additional days, life assurance, pension, and generous flexible benefits fund**
**Loved reading about this job and want to know more about Sector/Company?**
Our Aerospace, Defence and Security business designs, develops and deploys digital solutions that bring clients enduring business value across the UK’s Public and Private sectors. We foster a culture in which employees feel valued and supported, deliveringexceptional rates of customer satisfaction in the UK’s most complex safety
- and security-critical markets.