Security Manager in London

About The Role
Security Manager
Experienced in technical security implementations and innovation?
We have a fantastic opportunity for an experienced InfoSec Manager to join our growing Platform team. In 2023 our ambition is to be a high-performing, delivery-focused organisation, and a beacon for engineers at all levels who value meaningful career growth. We are looking for leaders in Security Engineering to guide our teams and be part of shaping our engineering culture of high performance and technical excellence. As a Information Security Manager in the Platform team, you will build out the security strategy and drive the implementation. This includes supporting our engineering strategy and mentoring and coaching other platform engineers, embedding best security practices and information security policies based on ISO 27001 and NIST Cyber Security Framework (CSF) together with being responsible for the InfoSec programme. With an exciting growth journey ahead, investment in tech and focus on building best-in-class tech teams, this is an exciting time to join us! Sound good? We'd love to hear from you!
Location: London or Portsmouth based. Hybrid working applies with 2 days in office, 3 days at home.
Where do you fit in?
You will report to and work with Head of Platform Engineering to support high performing platform engineers to deliver at pace and build out your own SecOps team. You'll work collaboratively and closely with the Engineering leadership as well as the wider Platform team. This includes coaching and mentoring other individual contributors on information security practises. This role requires you to be the technical lead for engineering and IT security and provide guidance on technical decision-making with an eye towards simplicity, high standards and a strong bias towards delivery. You'll be hands-on in security system design, architecture, development, testing and monitoring.
What's in it for you?
You will be a key part of the business success and will own and deliver a high level security framework. You will work with a cutting-edge tech stack built on Google cloud, working on an event-driven architecture with the help of serverless technologies and best-in-breed supporting services, using solid best practices to drive innovation for the future. Our tech includes C#, React Native, Typescript, Cloud Run, Cloud functions, Terraform and Firestore. We practice a shift-left methodology, TDD and BDD, automated CI/CD and fix forward. This is a fantastic opportunity to join a forward moving digital platform investing in its people and technology. An excellent salary and benefits package that includes a bonus, car allowance, Rewards Gateaway, electrical vehicle scheme and much more!
What do you need to succeed?
* Previous experience in a similar Security lead roles with expert level of skills in security automation and programming.
* Proven experience working with client and enterprise security.
* Experience in Zero Trust and BYOD implementations.
* SDLC security implementations and controls.
* Compliance tools around cloud infrastructure.
* Experience with IaC security tools and controls.
* Previous experience with NIST and ISO 27001 frameworks.
* Google cloud security professional certification or equivalent.
* You'll be skilled in security system design, architecture and providing guidance on technical decision making.
* Understanding of security testing frameworks and security driven BDD

Disclaimer:

This vacancy is being advertised by either Advanced Resource Managers Limited, Advanced Resource Managers IT Limited or Advanced Resource Managers Engineering Limited ("ARM"). ARM is a specialist talent acquisition and management consultancy. We provide technical contingency recruitment and a portfolio of more complex resource solutions. Our specialist recruitment divisions cover the entire technical arena, including some of the most economically and strategically important industries in the UK and the world today. We will never send your CV without your permission.