IT Security Manager
IT Security Manager
Newtone Consulting- Posted 41 minutes ago
- Be among the first 10 applicants
Job Description
We are looking for an experienced Security Manager to lead cybersecurity governance, risk, compliance, and operational security for large-scale public sector projects. You will work closely with government stakeholders, auditors, vendors, and technology teams to ensure systems and infrastructure maintain a strong and compliant security posture throughout their lifecycle.
Key Responsibilities
- Lead cybersecurity governance, risk management, compliance, and security assurance activities.
- Establish and maintain security policies, standards, procedures, and governance frameworks.
- Manage security accreditation activities including VA/PT, security assessments, remediation, and closure.
- Oversee vulnerability management, patch governance, security monitoring, and incident response.
- Ensure security controls and Secure-by-Design / Security-by-Default principles are implemented across applications and infrastructure.
- Act as the primary cybersecurity contact for government agencies, auditors, vendors, and project stakeholders.
- Identify security risks and drive appropriate mitigation and continuous improvement initiatives.
- Lead and mentor cybersecurity personnel and promote security awareness across project teams.
- Provide management with security posture, risk, compliance, and remediation updates.
Requirements
- Degree in Cybersecurity, Information Security, Computer Science, or related discipline.
- 8+ years of cybersecurity experience, including 3–5 years in a leadership role.
- Strong experience in cybersecurity governance, risk, compliance, security operations, and assurance.
- Experience managing vulnerability assessments, penetration testing, remediation, and security audits.
- Good understanding of security controls across applications, infrastructure, and enterprise environments.
- Experience with Government or other highly regulated environments is advantageous.
- Knowledge of ISO/IEC 27001, ISO 9001 and ISO/IEC 12207 is beneficial.
- Strong stakeholder management, leadership, communication, and reporting skills.
- Certifications such as CISSP, CISM, CRISC, CCSP or ISO 27001 Lead Auditor are highly desirable.
More Info
Key Skills
ISO 27001 Lead Auditor
ISO IEC 12207
cybersecurity governance
ISO IEC 27001
About Company
Skills:
Threat Analysis, Endpoint Security, Vulnerability Management, Cloudformation, Incident Response, Terraform, Siem, Waf, PAM, cybersecurity standards, ICT security compliance frameworks, system hardening techniques, Dam, secure network design, CI/CD security, EDR, AV, risk management practices, IaC security
Skills:
Certified Information Security Manager (CISM), Kali Linux, Vapt, Web Application Penetration Testing, Data Change Management, Batch Job Management, Nessus Manager, Nessus Professional, Problem Incident Management, Tenable SC, Network Vulnerability Assessments
Skills:
Cybersecurity, Cism, Risk Compliance, Security Operations, GIAC, security governance, Cisa, Security Assessments, vulnerabilities, Cissp, remediation processes, audits, CRISC
Skills:
cloud security, Ceh, Siem Tools, Network Architecture, Iso 27001, Iam, Azure, Cism, AWS, CIS, nist, Cissp, CRISC
Skills:
security metrics , security assurance , Security Controls, Cism, Security Audits, Compliance, Risk Reporting, Cybersecurity Automation Technologies, Cisa, AI-enabled Governance, Risk Management, Cybersecurity Governance Frameworks, Executive-Level Reporting, Cissp, Cybersecurity Governance, CRISC, Security Operations