Information Security Manager - Operational Technology (OT) Focus

Qodea is Europe’s leading Google Cloud specialist consultancy. tmc3 is part of the Qodea group of companies, specialising in solving cyber security, data protection and compliance challenges for a range of customers across the public and private sector.

A role within tmc3 will offer you fascinating work, excellent opportunities for growth and the freedom to realise your potential to excel. Combining strategies, technologies and innovation, we make cyber security a business enabler, delivering enduring results and enabling you to build a successful and rewarding career.

To do this, we would expect you to have a strong technical background in cyber security domains such as network security, cloud security, application security, endpoint security, identity and access management, etc.

Role Overview

As an Information Security Manager, you’d be responsible for ensuring the confidentiality, integrity, and availability of our customer organisation’s data. This role involves reviewing, developing, implementing, and maintaining security policies, procedures, and systems to protect against unauthorized access, cyber threats, and data breaches.

In the initial project you'd be aligned to, a key focus will be on managing information security in alignment with ISO 19650-3 standards and UK government handling requirements. Prior experience ISO 19650 is not a prerequisite. We would prioritise applicants who have experience with Operational Technology (OT) Security in the Utilities or Critical National Infrastructure (CNI) sectors.

Requirements

What you’ll do:

• Risk Assessment: Identify and assess areas of significant information security risk to the customer organisation’s systems.
• Policy Development: Develop security standards, procedures, and guidelines for the organization.
• ISO19650-5 : reviewing proposed documentation and implement and track their requirements
• Monitoring: Monitor information security threats in network and host systems.
• Incident Response: Investigate security breaches and other cybersecurity incidents.
• Training: Train staff on network and information security procedures.
• Audits: Conduct regular system audits to ensure compliance with security policies.
• Disaster Recovery: Review existing policies and work with stakeholders to establish disaster recovery procedures and conduct breach of security drills.
• Compliance: Ensure the company complies with changing laws and regulations regarding information security.
• ISO 19650-3 Compliance: Implement and manage information security measures in accordance with ISO 19650-3 & 5 standards.
• ISO 19650-2 Knowledge: Understanding and applying ISO 19650-2 standards, which focus on the delivery phase of assets, including the development of clear Exchange Information Requirements (EIR) and responsibilities for delivering them.
• UK Government Handling Requirements: Ensure compliance with UK government security policies, including the Government Security Classifications Policy and handling requirements for sensitive information. This includes understanding and applying the Security Policy Framework and other relevant guidelines.

What you’ll bring:

• A thorough understanding of the principles of Information Management as outlined as per ISO 19650 and the UK BIM Framework.
• Experience with undertaking similar activities for delivery of major construction and infrastructure projects.
• Experience in preparing Security Information Requirements.
• Experience in a leadership role
• The ability to influence multiple stakeholders, often with competing objectives, whilst preserving and maintaining excellent, collaborative relationships.
• A good appreciation of the various functions and roles involved in the delivery of complex construction and infrastructure projects
• Project management skills, able to multi-task and work flexibly to manage conflicting priorities.
• Knowledge of all stages of the construction and infrastructure project lifecycle.

Benefits

Original, strategic and operational consulting that provides transformational outcomes to high-profile customers.

The opportunity to work in committed teams that blend in-depth industry experience with high quality consulting expertise. Intelligent and interesting colleagues who will develop and challenge you.

A transparent career path where your advancement is objectively measured, enabling you to achieve your full potential.

• Competitive Market Salary
• Annual and referral bonus schemes
• 25 days holiday (increasing after time)
• Remote working
• Flexible Working (around core office hours)
• Company Pension
• Dedicated training and development budget
• Professional membership budget
• Home office equipment (for remote working employees)
• Electric Vehicle Scheme
• Group Life Insurance
• Private Medical Cover
• Enhanced Maternity / Paternity
• Employee discount and rewards platform
• Vision Care
• Regular team social events

Location:

There will be a requirement for the role-holder to travel regularly (2-3 days per week) to the customer site in either Reading or London (Vauxhall) so it would be preferable for the person we hire to live within a reasonable commuting distance of one of those locations.