Information Security Manager

at  ALSTOM

ABOUT NOMAD DIGITAL

Nomad Digital is the world’s leading provider of passenger and fleet connectivity solutions to the railway industry. Founded in 2002, and headquartered in the UK, currently serving more than 80+ global customers - in more than 40 countries - Nomad designs, builds, deploys and manages passenger Wi-Fi and on-board passenger infotainment systems. Nomad also provides remote online condition-based monitoring and maintenance solutions for optimising fleet management, operational performance and improving fuel economy.
When you join Nomad Digital, you will join a forward-thinking, fast-growing, fun environment with access to some of the very latest technology in its field. You will work with experts who innovate collaboratively, creating an environment of team work and trustworthiness.

QUALIFICATION REQUIREMENTS:

• CISSP / CISM Certified Professional
• ISO27001 Lead Auditor / Auditor Trained / Experience of ISO 27001
• Degree preferred
• Suitably qualified in security management in a software or similar environment
• Solid understanding of network principles and product software staging, configuration and commissioning stages
• Knowledge of integrated management systems and ISO standards
• Knowledge of business continuity systems and exercises, plans and documentation

EXPERIENCE REQUIREMENTS:

• Experience of working independently in a fast-paced demanding environment
• Experience of quality management / process development mapping
• Experience of the rail industry is preferable
• Experience and knowledge of software security is essential
• Experience of creating policies and procedures is essential
• Experience of using Sharepoint is preferable
• Experience in managing security incidents and information losses / follow ups / corrective actions

OTHER ESSENTIAL REQUIREMENTS

• Ability to travel as required on short notice
• Ability to be flexible in working requirements and bid deadlines / delivery support as and when required
• Knowledge of software testing, software development and software security functions and functionalities – (not essential)

JOB PURPOSE:

• To manage a security team responsible for:
• Maintaining information security
• Management of the organisation ISMS (Information Security Management System) aligned with ISO 27001
• Development and operation of the company’s security products
• Monitoring & testing of all products and services during development and once deployed (assurance)

ESSENTIAL DUTIES AND RESPONSIBILITIES:

• Develop and maintain an Information Security Management System for Nomad
• Responsible for ensuring security is maintained during a disaster or business continuity event. Act as security contact for all of Nomads Customer and stakeholders around information security
• Act as business continuity contact / representative for Nomad and develop and communicate relevant plans, exercises and reports around business continuity.
• Work with the various departments to develop and document security protocols and processes to reflect current and future operations. Support work on projects as identified by the relevant Project Managers in relation to security.
• Support Sales and Bid teams to ensure any security requirements are assessed and evaluated in line withNomads solutions for Bids.
• Investigate and collate any security related incidents ensuring corrective and preventive actions are generated in line with the business management system existing processes.
• Support the QHSE Manager in the evolution of the Nomad Business Management System in relation to all security documentation and other duties as directed.
• Accurate and efficient exchange of information through phone, email and face-to-face to ensure first-rate response to prospective customer enquiries and internal stakeholders as required.
• Proactive contact with managers and Directors to ensure issues and opportunities are identified in a timely manner, diffusing when necessary, escalating as appropriate.
• Internally audit departments / functions in relation to security operations and processes in line with the business audit plan
• Support supplier audits as required for any security related items / issues
• Nomad Digital have a global presence therefore, there could be some instances where the successful candidate will be required to travel to another office at short-notice.
• Risk management is a key part of the ISO 27001 accreditation, the successful candidate must have some experience within this area