IT Security Manager

Nisbets Limited are currently recruiting for an IT Security Manager to lead the IT Security and IT Compliance function for the group.

The role will be a hybrid working pattern of 3 days based in our Avonmouth and 2 days working from home. 

The key candidate will be responsible for scoping, implementing, monitoring, and maintaining IT security systems, they will be able to ensure compliance standards, strategy and reporting is carried out across all part of the group. They will be supporting the IT team and the business by being a trusted advisor in all aspects of IT security and IT compliance. They will be responsible for delivery of pragmatic, high quality, secure, cost-effective security solutions.

Key Accountabilities

• Ensure IT Security meets the standards required by Bunzl, and meets the needs of Nisbets and our subsidiaries.
• Ensure IT Security systems are secure and fit for purpose.
• Work with key stakeholders in the business, IT team and externally where required.
• In Conjunction with the Head of Technology, set objectives, establish priorities and develop plans.
• Arrange work schedules and prioritise accordingly to meet agreed deadlines.
• Prepare and present proposals and benefits cases as working documents for senior management review on a monthly ongoing basis within an annual planning horizon.
• Implement approved proposals, managing functional input, where appropriate.
• Scope, implement, monitor and maintain IT Security systems.
• Support the wider IT team, and the business, by being a trusted advisor for all IT security and IT compliance matters.
• Perform due diligence and sign-off for all IT Security and Compliance related matters.
• IT Security patching strategy, reporting and compliance.
• Ensure IT Security and compliance systems are developed and maintained to the highest possible level.
• Work closely with, and under the direction of, the Business Area Regional Information Security Officer and their team.
• Adherence to, and liaison with Group Internal and External Audit requirements and standards.
• Maintain external IT Security certifications as required by the business.
• Define Nisbets’ IT Security strategy.
• Implement and maintain information security policies and procedures.
• Ownership of data security and application security standards.
• Complete regular vulnerability scanning and required remedial actions.
• Ownership of the phishing strategy, campaigns, communications and remedial actions.
• Deliver tasks and programmes, on time, on cost, to high quality standards.
• Create and maintain appropriate documentation and standards.
• Share knowledge with IT team members and other stakeholders.
• Maintain third-party vendor, hardware and software relationships related to IT Security.
• Adhere to department policies and procedures and assist in the implementation of new processes.
• Ensure quality standards are adhered to by self and fellow members of the team.

Capabilities, Skills and Experience Required

• Excellent IT security knowledge. (CISM, NIST, etc)
• Working knowledge of GDPR and PCI-DSS.
• Hands-on approach.
• Excellent team leadership skills (communication, prioritisation, delegation, planning, etc.)
• Quality of work - Demonstrates a high degree of attention to detail, thoroughness and a methodical approach to work. Works at a pace that matches the requirements of the business and recognises the importance of timely completion of tasks.
• Communication & interpersonal skills - Ability to listen and understand information. Presents information in a clear and concise manner to both technical and non-technical people. Knows appropriate way of communicating with customers, peers and line managers. Demonstrates respect for all individuals in all forms of communication. Treat people fairly and courteously regardless of background or culture
• Initiative - Monitors and manages own time to ensure daily, and long-term objectives are met. Develops and improves procedures in agreement with line manager. Accepts additional challenges and responsibilities willingly and assists others.
• Self-reliance. Captures cross departmental analysis and detailed feedback from the Management team for review.
• Planning & organisation - Adapts to changes and uses resources effectively. Able to prioritise and execute competing activities and prioritise and delegate effectively.
• Budgetary competence.
• Demonstrable knowledge of the operational ITIL Service Management framework.
• Experience developing solutions based on best of breed products.
• Create and maintain strong relationships with fellow team members, key stakeholders, and external suppliers.
• Strong interpersonal skills and an excellent understanding of customer service.
• A professional and mature attitude to deal with a range of internal and external stakeholders.
• The ability to work under pressure and handle multiple tasks.
• A self-starter with a mature approach to problem solving and a good eye for detail.
• A committed and positive attitude.
• A flexible, and pragmatic approach.

Desirable

• Key vendor and/or relevant industry standard qualifications e.g. CISSP, CISM, Comptia Security etc.
• Working knowledge of CrowdStrike, Cisco, Microsoft, Dell, etc.

Key Benefits

• Competitive base salary plus a Company performance-based bonus scheme
• 29 days holiday Plus Bank holidays.
• Hybrid working pattern
• An additional day off for your birthday!
• Holiday Buying scheme options
• Excellent Opportunities for Career development
• Access to hundreds of high street discounts
• Staff Discount applicable to all products
• 8 Weeks Company Sick Pay
• Private Medical Insurance
• Life Assurance 3x Salary
• Pension scheme
• Employee Assist programme with access to 24-hour counselling