Security Manager

The Ashdown Group has been engaged by a well-known international company to source a Security Specialist to join their IT department on a permanent basis.

Located close to Victoria station this client is involved in finance and trading; they employ almost one thousand staff, rely on advanced technology and handle a high volume of data.

They require a Security Manager to ensure the effective governance and management of information security as this must meet the company’s legal and regulatory obligations (ISO27001).

You should be fully capable of enhancing, designing and implementing Information Security Policies. A high level of documentation skills, strong attention to detail and a good understanding of the IT processes around access, security and permissions for multiple systems, applications, databases, networks and access devices is required.

It will be necessary to add or amend additional processes on occasions, and this will require interaction and consultation with other parts of the IT department and business. As required, you will need to provide guidance, strategic direction and support on your area of expertise.

You will need to implement audits and, when detected, address non-compliance. You will need to monitor industry standards and market trends to ensure all policies exceed industry norms.

You need to be able to (with technical assistance) track security breaches that are brought to your attention. Once the root cause is identified you will need to implement appropriate countermeasures and work with HR, department managers and the legal team to resolve the issue.

Overall this role will include each of the following:

• Engage with IT support to manage security assets i.e. Tokens & USB keys

• Maintain user access to applications, systems and drives

• Enforce system access security policy & procedures

• Review security violation reports & investigate where required

• Responsible for risk assessment of the application security model i.e. password policy, group level security, permissions groups etc.

You will also work closely with stakeholders to develop an understanding of new applications and systems in the pipeline so you can ensure necessary access controls are planned for accordingly.

It is likely that the successful candidate will have a degree from a recognised University in a relevant discipline like Computer Science, Software Engineering, Mathematics, Physics or engineering.

Previous experience working within investment banking, trading or finance companies would strongly support your application.