We're looking for a pragmatic, risk focussed Information Security Manager to work within Nest and maintain our ISO 27001 certified corporation Information Security Management System (ISMS). We sit in the second line of defence and advise the business on security risks, incidents, audits, assurance and the implementation and monitoring of security controls that protects Nest. You'll have a solid background in information security management systems, technology and love communicating technical concepts to non-technical people.
Please note the minimum criteria for this role is:
- Practical experience of operating certified ISMS using ISO 27001/2, NIST CSF and other security standards in the design and management of information security controls.
- Practical experience working with third party suppliers to audit and evidence compliance with security policies, standards etc.
- Understanding and experience of various Information Security domains including Security Architecture, Information Security Governance, Network Security, Data Protection, Risk Management, Identity & Access Management, Vulnerability Management, Anti-Malware, Mobile Device Management and Cloud Security
We are open to discussing working patterns.
We welcome all internal applicants to apply for our roles, regardless of your current working pattern or hours. We will aim to accommodate your request and match your current working arrangements.
Don't worry if you think you don't have all the key skills, it might be worth taking the few minutes to apply as we're good at spotting potential and offer a generous training budget.
Please download a full job description to find a full scope, deliverables, experience and personal attributes required for this role.
Reward and recognition
- A discretionary bonus scheme
- Reward and recognition scheme
- Enhanced auto enrolled pension – your contributions start at the default 5% while ours are higher at 8%. If you up your contributions to 6% we raise ours to 9%. If you contribute 7% or more we’ll contribute 10%.
- Income protection scheme – is an insurance benefit that provides you with income if you cannot work due to illness or incapacity.
Flexible and agile working
Everyone's personal situation is different.
To make the most out of hybrid working, we've introduced different ways of working, which include (subject to role requirements):
- hybrid of office (Canary Wharf, London) and home working (there will be an expectation to attend the office, once - twice a week, or more, as required)
- reduce or vary working hours
- reduce or vary the days worked
- work compressed hours
- job share
For more information about our recruitment process click here