Head of Information Security

Job Role: Head of Information Security

Location: London

Reporting to: Chief Technology Officer

Established in 1984, MAK-SYSTEM’s vision is to design, develop, and deliver globally best-of-breed software to manage Blood, Plasma, Tissue, and Cells from end to end using the best technologies and functionalities for the patient’s benefit. Our software solutions continuously support the digital transformation of organizations such as

·      Blood Centres

·      Plasma Centres

·      Transfusion Services

·      Tissue Banks

·      Stem Cell Labs

·      Cell and Gene Therapy (SME to Big Pharma, CMOs, Hospitals)

We are looking for a Head of Information Security on a 12 month contract to cover a Maternity Leave during a time of attaining multiple certifications including ISO27001.

This is an exciting growth period for the company, operating in a managed services environment the role will entail growing the capabilities of both the team and the overall Infosec maturity of the organisation.

Key Responsibilities

·      Own and operate the existing Information security Strategy including processes and policies based on best practices

·      Manage the cybersecurity team, grow their capabilities and leverage their skillset to

·      Oversee current established and new cyber training programmes for mandatory staff training

·      Oversee and initiate Table Top and Red Team training activities

·      Own the security risk management and threat modelling by identifying risks and proposing adequate risk controls

·      Ensure maintenance of software bill of material from a security aspect  

·      Develop the security architecture aligned with existing and intended system and software architectures

·      Provide input for required cybersecurity testing and remediation work

·      Contribute to the creation of end-user documentation regarding cybersecurity information

·      Enhance process for  identifying, remediating, and reporting vulnerabilities 

·      Participate in creating the technical documentation for regulatory submissions related to information security 

·      Support audit teams with cybersecurity expertise

·      Ensure MAK system operates a best practise set of tooling to manage its information security framework and reporting

·      Keep current with new intrusion methods and develop protection plans.

·      Ensure that our managed services offering is compliant with all of the required security and privacy frameworks.

·      Ensure that our business complies with any required security, compliance or privacy frameworks such as ISO27001, Cyber Security Essentials, NIS2 and SOC2.

Objectives

·      Enforce and adhere to best practises in information security governance

·      Operate the information security framework and roadmap of change

·      Improve, create and maintain new and existing processes related to information security

·      Lead all MAK security processes including Incident Response, third party due diligence, table top exercises and vulnerability management

·      Create and promote security MI to management and board level

Previous Experiences/Qualifications

• Bachelor’s degree and or equivalent professional experience across Information Technology/Information Security
• Knowledge of ITIL framework, qualification highly desirable.
• Knowledge of Cloud platforms, particularly AWS is an advantage.
• Experience working in a managed service or regulated industry is beneficial.
• Strong stakeholder and relationship management skills.
• Ability to work unsupervised, operating at a senior management level.
• Ability to make recommendations to resolve conflicts by using judgment that is consistent with MAK-SYSTEM’s culture, policies, and procedures.
• Innovation, Flexibility, and Adaptability – undertake tasks with a positive attitude and respond well to management and customer requests.
• Good time management skills and the ability to deal with ambiguity and manage multiple priorities effectively.
• Effective communication and collaboration skills suitable for liaising with colleagues and customers.
• Fluency in English (both verbal and written).