Cyber Security Leader: ISMS & Risk Management

London North Eastern Railway; York and North Yorkshire; On-site; GBP 70,000 - 90,000; Full time

Job summary

A prominent rail company is seeking an experienced Information Security Manager for a 24-month fixed term contract. The successful candidate will lead the development and execution of the Information Security Strategy, ensuring robust protection of information assets and compliance with industry standards such as GDPR and PCI DSS. This strategic role involves managing cybersecurity initiatives, building relationships with stakeholders, and contributing to the company's commitment to customer safety and data protection.

Benefits

Free travel on LNER + 75% off other companies' tickets

Discounted international train tickets after one year

Generous pension scheme

Health & wellbeing schemes and discounts

Qualifications

• Demonstrable experience within an IT role, including evidence of IT Security experience.
• Recognised industry security certification (e.g., CISSP) and PCI Security Standards qualification (e.g., ISA, PCIP).
• Proven experience building and managing security systems and frameworks, including ISO27001 or PCI DSS.

Responsibilities

• Lead the development and delivery of Information Security Strategy.
• Define security policies and procedures, managing third-party assurance.
• Champion security patch deployment to minimise downtime.

Skills

IT Security experience

Cyber security knowledge

Risk management

Team management

Compliance with GDPR

Networking security

Education

CISSP certification

PCI Security Standards qualification

Tools

Firewalls

Intrusion detection systems

Anti-virus

Log management systems

Job description

A prominent rail company is seeking an experienced Information Security Manager for a 24-month fixed term contract. The successful candidate will lead the development and execution of the Information Security Strategy, ensuring robust protection of information assets and compliance with industry standards such as GDPR and PCI DSS. This strategic role involves managing cybersecurity initiatives, building relationships with stakeholders, and contributing to the company's commitment to customer safety and data protection.