The Senior Information Security Manager works at a strategic level as the point of escalation for clients, operational teams, and the ISMs reporting to them. They are responsible for the development and maintenance of organisational policies, products and methodologies to manage and reduce information security risk and to drive continuous improvement. Share best practice and drive the development of the ISM and ISA population Lead the security engagement and be the main security point of contact across a broad sector within Capita to ensure effective security management
Ensure delivery against any client information security requirements.
Provide SME security support into business operations and change initiatives
Provide oversight and input on information security related risks across designated remit
Reporting on information security at internal and client facing risk committees and meetings (e.g. SWG)
Contributes to development of cyber security policies, standards and supporting material
Pro-active management of risks by sharing best practice in the external marketplace and applying it within Capita
Provide strategic risk guidance for IT and non-IT projects, including the evaluation and recommendation of technical and non-technical controls.
Security review/ input of bids proposals, RFP security responses, client exits new business transitions
Conducting investigations, analysis and review following breaches of Information Security controls and preparing recommendations for appropriate control improvements, involving other professionals as required.
Supporting security related internal and client audits.
Providing support and input into obtaining and managing security certifications (e.g. PCI, ISO27001, etc)
Will be an expert specialist or manage a team of Security ISM and IS Analysts on assigned client engagements