Reed

About the Company

Reed is the largest family-run recruitment business in the world and we’ve been improving lives through work since 1960. We have the UK's largest candidate database, expertise in 20 specialist sectors and offer the longest guarantees on the market.

We’re a pioneer of specialist recruitment services and our experts work with more than 30,000 organisations in the UK to fill their temporary, permanent and interim positions.

For more information on our services, jobs and industry insight, visit Reed.com

Listed Jobs

Company Name

Reed

Job Title

Information Security Officer

Job Description

Information Security Officer
Location: Newport, South Wales
Job Type: 37 hours Monday to Friday
Salary: Starting at £41,446 rising to £47,365
We are seeking an Information Security Officer to assist with the coordination and support of security duties across IT and Cyber project initiatives. This role is crucial in ensuring that IT projects adhere to security policies, secure architecture principles, and regulatory cyber assessment frameworks. The ideal candidate will provide expert advice and manage information security risks effectively.
Day-to-day of the role:
Support Information Security activities across all non-CAF based IT projects.
Deliver security artifact requirements for each IT Project quality gate.
Document and log security assessments, including arranging penetration tests and code reviews for ongoing and new projects.
Report on all security incidents and risks identified within IT projects.
Evaluate and coordinate tickets assigned to the security team within the IT ticketing system.
Log and manage any control defects or failures identified via the SecOps ticket tracking system.
Provide security support to other projects and ongoing programmes of work, both planned and ad hoc.
Support the review and improvement of existing systems’ security operations capabilities.
Required Skills & Qualifications:
Passionate about information security with a proactive approach to improving security posture.
Strong understanding of cloud concepts, especially hybrid cloud environments. Experience with VMWare and Microsoft Azure is essential.
Familiarity with project management methodologies such as Waterfall, Agile, and PRINCE2.
Knowledge of cyber attack modelling, endpoint detection, threat management products, and network security.
Strong commercial acumen and the ability to translate between technical and business language.
Knowledge of information security control and compliance standards such as NCSC CAF, ISO27002, IEC17789, CIS CSC, and NIST CSF.
Understanding of CSIRT and incident response processes. Experience with Microsoft Defender products and Microsoft Sentinel is advantageous.
Qualifications:
CISMP (Essential)
SC-900, AZ-900 (Essential)
CISM (Advantageous but not essential)
SC-200, SC-300, SC-400, and AZ-500 (Advantageous but not essential

Newport, United Kingdom

Hybrid

04-12-2024