Information Security Lead 12 month FTC

London | Remote Contract Up to £65K Depending on experience Ref: 420046

The Role

The Information Security Lead will play a central role in maintaining and strengthening the organisations information and cyber security posture during a period of significant technology transformation. This is an exciting opportunity to work within a small and highly supportive team, where you will be involved in all aspects of information and cyber security, spanning governance, risk, assurance, incident response, supplier oversight, culture and strategic change.

You will employed on a remote contract with occasional travel to their HQ in London.

This role is for a 12 month FTC and ideally looking for an immediately available candidate.

Key Responsibilities

Maintaining and embedding existing security policies, standards and controls.
Continuing to improve security maturity against frameworks such as NIST/CAF.
Gathering assurance and evidence that controls are operating effectively.
Producing security metrics and reporting for senior stakeholders/board.
Managing and challenging outsourced security providers, including the SOC and MSP.
Supporting supplier and third-party security risk.
Maintaining security awareness and training activity.
Supporting Cyber Essentials Plus and ongoing assurance activity.
Providing security input into wider projects and business change.
Coordinating the business response should a significant security incident occur.

Skills Required

Strong information security governance, risk and assurance experience.
Knowledge of NIST, CAF or similar security frameworks.
Cyber Essentials Plus knowledge/experience.
Security/major incident management experience.
Experience managing or assuring outsourced SOC/MSP/security providers.
Strong third-party and supplier management experience.
Ability to assess whether security controls are genuinely working rather than simply accepting supplier reporting.
Strong stakeholder communication and reporting skills.
Ability to independently manage an established security roadmap.

The Person

Given the remote nature of the position, my client is looking for someone who is a self-starter, proactive and comfortable taking ownership without needing lots of day-to-day management. They also need to be confident challenging suppliers and communicating with both technical and non-technical stakeholders.