Information Assurance Security Manager ( IASM)

DXC; Gloucester; On-site; GBP 60,000 - 80,000; Full time

Job summary

A leading IT solutions provider in Gloucester is seeking an experienced Information Assurance Security Manager to oversee compliance with security standards and improve risk management practices. The ideal candidate will possess several years of experience in information security, hold relevant certifications such as CISM or CISSP, and be proactive in identifying risks. This role offers a competitive salary and a diverse benefits package, promoting career growth and a work-life balance.

Benefits

Competitive compensation

Pension scheme

Comprehensive benefits package including private health insurance

Discounts on technology, groceries, travel

Employee recognition tools and regular social events

Qualifications

• Several years of experience in a similar or related role is required.
• Desirable qualifications include CISM or CISSP certification.
• Experience working with HMG best practices is needed.

Responsibilities

• Monitor compliance with defined security controls.
• Advise on risks associated with security non-compliances.
• Maintain the risk assessment and security-related documentation.

Skills

Information security risk management

Proactive risk identification

Team working

Customer focus

Education

CISM or CISSP certification

Membership in a professional body

Tools

AWS

MS Azure

VMWare

Redhat Openshift

Windows operating systems

Linux operating systems

Job description

Job Description:

Information Assurance Security Manager

Location: Gloucester - on site 5 days per week

Vetting: UK National eligible for security clearance

At DXC Technology, delivering excellence for our customers and colleagues is more than just a motto, it’s something we strive towards constantly through our work. Every day we deliver mission critical services in a secure environment whilst promoting our people first agenda, a real sense of community and a healthy work-life balance. Our consistently positive customer feedback and continuous growth helps us cement our place as one of the world’s leading IT solutions enterprises, helping us deliver services and solutions in both challenging and exciting situations.

We believe that hiring a diverse team is crucial to our success and our recruiting decisions are based on your skills and experience as an individual. We actively encourage consistent growth on our journey towards a culture of inclusion and recognise that the people we employ are vital to providing a great customer experience. As such, we have a variety of training, support, and tools available to aid in your continual personal and professional development. Our ongoing goal is to drive innovation and modernise operations across the board, which includes furthering the skills of our colleagues. At DXC, building a better you, builds a better us.

The role

At DXC,one of our platinum accounts has an opening for an Information Assurance Security Manager. The successful candidate will work within multiple teams and will be innovative and analytical with a good eye for detail. Your role will include implementing standards, policies, and procedures for continual service improvement. We are looking for someone who has all round skills in information security risk management.

Role responsibilities

• Working closely with service delivery teams, monitor compliance of existing services with defined security controls, identifying non-compliances, determining the preferred route to remediation, and monitoring and reporting on the progress of associated actions
• Advise risk owners as to the severity of the risks associated with any such non-compliances, and where necessary discussing potential mitigation strategies (and their impacts) to enable them to make informed risk management decisions
• Monitor implementation and ongoing maintenance of agreed risk management BAU activities (e.g. patching)
• Maintain the risk assessment and related artefacts such as the risk register and security-specific documentation such as Security Operating Procedures through-life
• Assess the security impact of changes to the service, reflecting agreed changes in security documentation
• Create and deliver regular reports regarding the security posture of the service being delivered
• Assist the Account Security Lead with creating and maintaining security-related processes, policies and guidance
• Proactively identifying areas for improvement in security across the account, both to improve security, and make good security easier

What you will bring to the team

• Several proven years experience in a similar or related role with desirable additional qualifications to include CISM or CISSP / IISP or other professional body membership
• Experience of working to HMG (e.g. NCSC guidance, DSIT Secure by Design, GovS 007) best practices
• Desire to improve processes, looking for the root cause of a problem
• Willingness to both share your knowledge and learn from others
• A proactive approach towards looking for risks and problems, and solving them
• A strong team working ethic, with a “customer first” focus and a thirst for knowledge

Desirable Skills and Technologies

• A good knowledge and understanding of information and cyber security risk management
• Knowledge of threat modelling utilising STRIDE or Attack Trees
• Knowledge of the NIST Cyber Security Framework
• Knowledge of various technology stacks including Cloud (AWS, MS Azure), M365, VMWare, Redhat Openshift or other container orchestration platforms, Windows and Linux operating systems
• Knowledge of industry security guidance provided by the likes of OWASP and CIS
• Awareness of security champions programmes

What we will do for you

• Competitive compensation
• Pension scheme
• DXC Select – Our comprehensive benefits package (includes private health/medical insurance, childcare vouchers, gym membership and more)
• Perks at Work (discounts on technology, groceries, travel and more)
• DXC incentives (recognition tools, employee lunches, regular social events etc)

At DXC Technology, we believe strong connections and community are key to our success. Our work model prioritises in-person collaboration while offering flexibility to support wellbeing, productivity, individual work styles, and life circumstances. We’re committed to fostering an inclusive environment where everyone can thrive.

Recruitment fraud is a scheme in which fictitious job opportunities are offered to job seekers typically through online services, such as false websites, or through unsolicited emails claiming to be from the company. These emails may request recipients to provide personal information or to make payments as part of their illegitimate recruiting process. DXC does not make offers of employment via social media networks and DXC never asks for any money or payments from applicants at any point in the recruitment process, nor ask a job seeker to purchase IT or other equipment on our behalf. More information on employment scams is available here.