Information Security Manager

**Job Title**:Information Security Manager

**Location**:Exeter Remote or Hybrid working

**Salary**: £75,000 - £95,000 DOE

**Job type**: Full Time

What sits at the heart of The Exeter is the unwavering teamwork and engagement from all our colleagues. Each and every one of them is focused on the reason why the Society exists, to support our members.

We continue to deliver high levels of service our members have come to expect from The Exeter, and will be looking for opportunities to improve these experiences further. We are setting out a blueprint for how we can achieve continued growth and success in a more uncertain world and this will require time and investment in both our digital capabilities and our people. Our members trust us to insure what matters most to them, in the event of their illness, injury or death and we are committed to continuing to offer insurance solutions that better serve the needs of a wider range of people.

Ensuring that we are always recruiting, retaining and promoting a diverse mix of colleagues who are representative of the diversity of our members gives us a great opportunity to have access to a broad range of ideas and allows us to give our members the fantastic service that is known and expected from The Exeter.

**The role**:

- Provide the expertise to create, maintain and mature information security strategies that ensures legal, regulatory compliance.
- Help to ensure organisational resilience by supporting key stakeholders, authorities and peers in the management of information risk.
**Key Responsibilities and Accountabilities**:

- Manage, mature and optimise The Exeter's Information Security controls framework
- To update, maintain and promote The Exeter's information security policies and procedures encompassing the requirements of law, the Regulators, ISO 27001, Cyber Essential Plus standards as well as National cyber security guidance.
- To be the primary escalation point for any IT Security related matters always ensuring that issues are dealt with effectively and efficiently, and that tactical expedients are aligned with the strategic plans.
- To provide quality, informative, actionable information security reports
- To lead on developing, implementing, and maintaining an effective cyber security culture across the Society.
- To chair and operate the Security Champions Group
- Adherence to the relevant regulators principles and rules, including individual conduct rules, Treating Customers Fairly, and the company's risk management policies.
- Take care of own health and safety and that of others in the workplace
**Experience & Qualifications**:

- Experience and success as an Information Security Officer in an agile medium sized hybrid-cloud enterprise
- CISSP / CISA / CISM certified or working towards
- A good understanding of Data Protection including GDPR standards and practices.
- Practical experience of ISO 27001 and Cyber Essentials certifications
- Desired ITIL Intermediate Certified
- Experience of Center for Internet Security (CIS) critical controls or NIST frameworks.
- **All applicants must have the right to work and live in the UK, as we are unable to offer visa sponsorship**
- Highly motivated, self-driven individual, with strong leadership and influencing abilities
- Excellent multitasking, organisation and prioritisation skills
- Able to adapt to change and tolerance of ambiguity
- A good relationship builder with excellent communication and team working skills
- Innovative, with the ability to problem solve

**Benefits**:

- Plan for the future with our generous pension scheme
- Enjoy life with a minimum 27 days' holiday plus Bank & Public Holidays
- Take a break with an extra day off on your Birthday
- Make a difference with 2 days' paid leave each year for volunteering
- Peace of mind for loved ones with free life cover (four times salary)
- Feel protected by free income protection cover
- Look after your health with free health insurance
Please click on the **APPLY** button to send your CV and Cover Letter for this role.