We are seeking a dual expertise professional to manage our information security posture while also providing support for network engineering initiatives assisting the network team. This hybrid role requires a strategic thinker who can design secure architectures, implement defensive controls, support our core network and security infrastructure. This role will report into the Head of IT and will be part of the IT management team. This role will on occasion be required to deputise for the Head of IT and be on the IT duty manager on call rota.

Key Responsibilities

Information Security Management

• Framework Governance: Align systems with ISO27001, NIST and CBEST frameworks.
• Risk Assessment: Review new service implementations both on prem and cloud based and ensure systems and services comply with our security standards.
• Risk Mitigation: Conduct regular vulnerability scans and coordinate external penetration testing.
• Inci...