The IT Security manager is a key role in managing proactive security management activities across the VetPartners group and is a part of the broader IT security team.
This role involves managing a small team of experts who will oversee VetPartners Security platforms, manage relevant security/identity controls in VetPartners cloud platforms and provide security advice and guidance to project and BAU teams
This role blends technically focused elements with business and IT stakeholder engagement
A highly collaborative security role, where you will be expected to understand and communicate details from a security perspective to a broad range of colleagues.
Working for the Head of IT security you will be identifying issues and opportunities to be considered as part of the Vetpartners IT security strategy.
This is a diverse and broad ranging role across a complex landscape spanning UK and Europe.

KEY SKILLS/EXPERIENCE

• 3+ years’ experience in a similar role, with a strong background in IT security management
• One or more of the following professional qualifications: CISSP, CISSM
• Degree in Computer Science/Cyber Security, related field or equivalent work experience
• Excellent understanding of technical security controls, processes and cloud services
• Working knowledge of Vulnerability Management solutions such as Qualys, Nessus, etc.,
• Microsoft Azure Experience
• Hands on Technical experience of operating system security and related tooling
• Understanding of digital security and the general principles that come along side
• Knowledge of industry standards and relevant regulations: ISO 27001, NIST 800-53/CSF, PCI-DSS, Cyber Essentials, Mitre ATT&CK, SOC 2, GDPR
• Excellent communication and interpersonal skills, with the ability to effectively communicate security-related concepts to technical and non-technical audiences.
• Ability to work independently with minimal supervision.
• Ability to prioritize tasks and projects to meet deadlines.
• Excellent analytical skills
  To Apply, click ‘Apply Now

• Manage, provide leadership and mentoring to Security Management colleagues within the broader IT Security team
• Oversee management of security systems/platforms including Anti Malware/EDR, E-mail Security, SASE, Privileged access management and Phishing Simulation / Training platforms
• Support Security Operations manager and team with proactive elements of managing Vulnerability Management and SOC platforms
• Defines security testing (pen-test scoping) requirements in projects and BAU services. Interprets the results and puts into context while feeding back to key stakeholders and the business.
• Ensure that an appropriate and proportionate approach is taken to manage Information Security risks and issues, with a focus on practical steps that can be taken to address them, as well as identifying areas to be considered as part of the VetPartners security strategy.
• Ensure appropriate assessments take place of third-party partners, suppliers and vendors. Provide support to third parties and the colleagues responsible for them in VetPartners to ensure security requirements can be appropriately met
• Operate, oversee and provide expert advice into an engagement process for projects to ensure that Information Security controls are built into any implementation or change.
• Manage internal and external security audits
• Ensure that security related identity and Microsoft platform security tasks are appropriately managed, both through the engineering capability within the IT security team and across the broader IT teams.
• Measure the effectiveness of security controls through metrics and KPI’s
• Consulting on day-to-day security issues
• Maintain technical security documentation in line with continuous improvement for best practices
• Development and management of technical standards, designs and guidelines
• Manage security project processes through lifecycle and supporting into BAU
• Stay current with industry trends, emerging threats, and best practices in information security to ensure the organization remains proactive and well-prepared against potential risks.
• Foster a culture of security awareness and accountability throughout the organization and using security training / awareness tooling as appropriate.
• Contribute to and achieve business and departmental goals and objectives.
• Monitor adherence to policy and raise exceptions to policy through an agreed policy with the correct sign off.