Information Security Manager

Sword is a leading provider of business technology solutions within the Energy, Public and Finance Sectors, driving transformational change within our clients. We use proven technology, specialist teams and domain expertise to build solid technical foundations across platforms, data, and business applications. We have a passion for using technology to solve business problems, working in partnership with our clients to help in achieving their goals.

We are excited to announce that we are looking for an experienced Information Security Manager to join the security team. Reporting directly to the CISO you will be responsible for the implementation and delivery of Sword's cyber security strategy and program.

Key Responsibilities:

The Information Security Manager is primarily a technical role and will be required to operate with high levels of autonomy, effectively translating business objectives and risk management strategies into specific IT security processes enabled by security technologies and services.

Here are the key skills and experience relevant to this role:

• Security Operations - Implement and oversee the day to day running of security including M365 Security (Sentinel, Defender, Conditional Access) and Azure security protocols.
• Vulnerability Management - Proactive and risk-based vulnerability management including attack surface management, system hardening, and cloud security posture management.
• Service Management - Ability to deliver security as a cohesive service through a combination of internal resources and external service providers.
• Incident Response - Oversee security incident management and drive enhancements to risk mitigation strategies through ongoing assessments.
• Continuous Improvement - Deliver the security program through a series of continuous and incremental improvements.
• Security Culture - Drive improvements in the internal security culture through ongoing awareness, training, simulated phishing campaigns, and security champion's network.
• Security Governance - Develop and refine security policies, frameworks, and procedures, maintaining alignment and accreditation ISO 27001 and Cyber Essentials Plus.
• Risk Management - Conduct security risk assessments across vendors, projects, and internal teams, identifying areas of concern and driving remediation efforts.
• Regulatory & Client Requirements - Ensure Sword remains compliant with relevant legal, client, and regulatory obligations, keeping pace with evolving security landscapes.
• Third-Party & Supply Chain Security - Assess and manage security risks related to suppliers and partners, ensuring robust security measures are maintained.

This is a challenging and rewarding role that offers the opportunity to work with a talented team and help our clients as they continue their Digital Transformation journey. If you have a passion for technology and enjoy leading and mentoring technical teams, we encourage you to apply for this role.

Requirements:

Here are the key skills and experience relevant to this role:

You should have direct experience, or strong working knowledge, of the following:

• Microsoft security architecture and technologies including EDR, Firewalls, SIEM, DLP, IAM, and Email Security.
• Managing IT security infrastructure e.g., firewalls, intrusion prevention systems (IPSs), web application firewalls (WAFs), endpoint protection, SIEM, vulnerability management, Data Loss Prevention (DLP), Email Security, Identity and Access Management.
• Cyber Security Frameworks (NIST), regulations such as the General Data Protection Regulations (GDPR) and Network Information Systems (NIS2), and industry standards such as ISO 27001.
• Experience designing the IT security requirements related to the deployment of applications and infrastructure.
• Significant experience in a similar role preferably in an international organisation.
• Experience of working with a range of IT and IT security specialist suppliers.

Qualifications and Personal Skills:

• Major industry certification such as CISSP, CISM, CRISC, etc.
• Certification in relevant Microsoft security technologies.
• Takes ownership and accountability with an ability to self-manage tasks and activities to consistently deliver results.
• Dedicated and proactive learner who keeps up to date with security trends and is continuously improving and refining skills.
• Excellent communication, negotiation and influencing skills - able to influence operational effectiveness across an organisation to achieve results.

Benefits:

At Sword, our core values and culture are based on caring about our people, investing in training and career development, and building inclusive teams where we are all encouraged to contribute to achieve success.

We offer comprehensive benefits designed to support your professional development and enhance your overall quality of life. In addition to a Competitive Salary, here's what you can expect as part of our benefits package:

Personalised Career Development: We create a development plan customised to your goals and aspirations, with a range of learning and development opportunities within a culture that encourages growth.

Flexible working: Flexible work arrangements to support your work-life balance. We can't promise to always be able to meet every request, however, are keen to discuss your individual preferences to make it work where we can.

A Fantastic Benefits Package: This includes generous annual leave allowance, enhanced family friendly benefits, pension scheme, access to private health, well-being, and insurance schemes.

At Sword we are dedicated to fostering a diverse and inclusive workplace and are proud to be an equal opportunities employer, ensuring that all applicants receive fair and equal consideration for employment, regardless of whether they meet every requirement. If you don't tick all the boxes but feel you have some of the relevant skills and experience we're looking for, please do consider applying and highlight your transferable skills and experience. We embrace diversity in all its forms, valuing individuals regardless of age, disability, gender identity or reassignment, marital or civil partner status, pregnancy or maternity status, race, colour, nationality, ethnic or national origin, religion or belief, sex, or sexual orientation. Your perspective and potential are important to us.

If we can do anything to help make the hiring process more accessible, please let our talent acquisition team know when you apply so we can support any adjustments.