Total 25 Manager legal public security job vacancies in east midlands midlands le2 0qb

We are seeking a highly experienced Information Security Technical Program Manager to lead our ISO 27001:2022 certification initiative. The successful candidate will manage all aspects of the certification process, ensuring alignment with organizational objectives and industry standards.

5+ years of experience in Project Management, with 3+ years directly managing ISO 27001 certification or similar standards;

Strong knowledge of ISO 27001:2022 standards and requirements;

Experience in developing and maintaining comprehensive project plans, including timelines and milestones;

Experience in managing ISO 27001-related risks and conducting internal/external audits;

Excellent communication and leadership skills with the ability to engage with cross-functional teams (Technology, Compliance, Legal, HR, Operations) and external auditors;

ISO 27001 Lead Implementer or Lead Auditor certification is highly preferred;

PMP, CISSP, CISM, or similar certifications are a plus;

• Lead the ISO 27001:2022 certification program from start to finish, developing project plans and tracking milestones to ensure alignment with organizational goals;
• Oversee the creation, implementation, and maintenance of policies, procedures, and documentation for ISO 27001 compliance;
• Collaborate with Technology, Compliance, Legal, HR, and other teams, acting as the primary contact for external auditors;
• Identify and mitigate risks to ensure compliance with ISO 27001 standards;
• Drive initiatives to enhance the organization’s security posture and stay updated on ISO 27001 changes;
• Develop training programs to increase ISO 27001 awareness across the organization;
• Provide regular updates on certification progress, risks, and the organization’s security posture.

Should you be interested in this career opportunity, please send in your updated resume to apply@sciente.com at the earliest.

When you apply, you voluntarily consent to the disclosure, collection and use of your personal data for employment/recruitment and related purposes in accordance with the SCIENTE Group Privacy Policy, a copy of which is published at SCIENTE's website (https://www.sciente.com/privacy-policy).

Confidentiality is assured, and only shortlisted candidates will be notified for interviews.

EA Licence No. 07C5639

Head of Enterprise Security Architecture

Location: UK / Hybrid - with some travel

National Highways have an exciting career opportunity to join us as Head of Security Architecture. Reporting directly into the Chief Security Officer you will oversee and lead the provision of security architecture services to change initiatives, aligning and coordinating with wider architecture governance functions to advise on and deliver a comprehensive enterprise (IT) and operational technology (OT) security architecture which reduces both the probability and impact of a cyber attack against to National Highways.

This is a hybrid role which can be based from any main National Highways office - (40% office based)

Please note we require the successful candidate to be SC cleared or willing to go through checks at the time of onboarding.

What you'll be leading on

• Own, improve and articulate the Highways England enterprise and operational technology security architecture.
• Oversee wider architectural governance functions, ensure all change initiatives are reviewed and supported to ensure alignment with the enterprise and operational technology security architecture.
• Set the direction for external partners to influence cyber security related regulatory requirements and ensure that change initiatives are aligned with those requirements.
• To be accountable for overseeing and maintaining appropriate technical security guidance documentation in support of wider security policies.
• Maintain the effectiveness of core enterprise and operational technology security capabilities.
• Anticipate technology trends, future threats and capability requirements. Assess their business value and initiate team and wider capability development to address these.
• Manage, decide mitigations for and resolve architecture/cyber security related risk

To be successful you'll need

• HoldrelevantCyber Security qualifications in either of the following:
  • BSc / MSc in Cyber Security, Computer Science or related subject;
  • CISSP, GICSP, Senior CCP (Architect) or similar Security Architecture qualification;
  • CCSP, CCSK or similar Cloud Security qualification
• Have a demonstratable track record of leading a team of Security Architects along with a background of delivering security architecture in both OT and IT domains
• Experience of working at an enterprise level as a member of an organisation's architectural governance apparatus
• Experience of delivering security architecture to meet NCSC Cyber Assessment Framework requirements
• To be able to translate security impacts into business consequences
• The ability to take business requirements and propose corresponding security requirements
• Have strong commercial acumen with the ability to work with suppliers to drive cost effective solutions for National Highways
• To be able to produce detailed written briefs and to conduct concise verbal briefings to senior stakeholders

A bit about us

The Digital Services Directorate is a growing and vibrant team and there has never been a better time to join us as we go through our transformation programme. We are helping to transform the way National Highways operates by delivering digital, data and technology services from frontline to back office, in a modern and efficient way. Our vision is to develop integrated information and technology that empowers our colleagues and provides real time information to our customers, integration with intelligent vehicle and transport systems as they develop, to improve journey safety and reliability.

Why you should join us

At National Highways we believe in a connected country. We are passionate about creating a culture where colleagues feel connected, included and enjoy greater wellbeing to achieve this. We're proud that as an organisation we are continually striving to do better and actively encourage and support our colleagues to do the same with their careers.

Want to know more?

To request a copy of the role profile, please contact quoting reference number 5792

Proud member of the Disability Confident employer scheme

Responsibilities :

• Analyze and prioritize vulnerabilities based on severity, potential impact and business risk, and collaborate with relevant teams to implement effective mitigation strategies.
• Provide strategic guidance, insights, and direction on technological, cybersecurity, and policy-related topics.
• Lead and participate in the development, implementation, and continuous improvement of incident response procedures, and processes.
• Collaborate with other teams at multiple geographic locations to investigate and document security incidents, root causes, and recommend remediation actions.
• Planning and appraising ongoing assessment of antivirus, application control, firewall, SIEM, VPN, SSL, intrusion detection or intrusion prevention and other network component policies.
• Managing and configuring security systems such as firewalls, intrusion detection and prevention systems, anti-virus software, and other security-related software and hardware.
• Monitoring systems, servers, and networks to detect and respond to potential security threats or suspicious activities.
• Developing and implementing security policies and procedures that ensure the organization’s data and systems are protected against cyber threats.
• Conduct regular vulnerability assessments and penetration testing to identify potential security weaknesses and risks to make improvements in the organization’s security.
• Report all security incidents to the home office and work with corporate IT on response and resolution strategy.
• Contribute to the development and execution of security awareness training programs for employees to enhance security awareness and best practices.
• Stay up to date with the latest cybersecurity threats, attack techniques and incident response strategies.

Requirements :

• Bachelor’s Degree in Computer Science/Information Technology or equivalent.
• At least 5 years of experience in a cyber or information security management role.
• Strong knowledge of the latest cybersecurity threats, trends, modern cybersecurity concepts, and technologies (zero trust, CIS Controls, OWASP, MITRE ATT&CK, XDR, CloudSec, AppSec, NIST, ITIL, Azure Well Architected Framework, etc).
• Experience in domains of Cyber Security Operations, Incident Response, Forensic Investigation, Threat Intelligence, or Vulnerability Management preferred.
• Ability to manage and configure security systems, monitor network traffic and system logs, conduct regular security assessments and respond to security incidents.
• Demonstrated understanding of business processes, IT risk management, and related standards.
• Proficiency in utilizing industry-standard tools for vulnerability scanning, assessment, and penetration testing.
• Excellent problem-solving skills and the ability to think critically under pressure.
• Effective communication and interpersonal skills, with the ability to collaborate across teams and convey technical concepts to non-technical stakeholders.
• Proven track record of staying current with evolving cybersecurity threats and best practices.
• Exceptional planning and organizational skills, and excellent written and oral communication.
• Self-starter with initiative and the ability to effectively prioritize and execute tasks with direction from corporate headquarters.
• Professional information security certification preferred, such as:

- CompTIA Security+

- Certified Information Systems Security Professional (CISSP)

- Certified Information Systems Auditor (CISA)

- Certified Information Security Manager (CISM)

The purpose of the Palo Alto Strategic Leader and Cloud Security Sales at IBM is to drive net new pipeline development and sales progression of IBM Consulting Cybersecurity Services (CSS) client opportunities that incorporate Palo Alto Networks (PANW)’s technology in the broader solution offered by IBM Consulting (IBMC). These opportunities may be part of an even more comprehensive opportunity that an IBMC Lead Client Partner (LCP) is pursuing with or delivering to the client.

The focus of this role will be to develop new and high value IBMC opportunities for the PANW specific CSS portfolio, which currently includes:

· Threat Management, Cyber Trust, X-Force, and Strategy

· Consulting and Systems Integration (C&SI) services and Managed Security Services (MSS)

The CSS PANW portfolio will include all PANW cybersecurity products, including and not limited to:

· Prisma Cloud

· Prisma Access

· Cortex (XSIAM, XDR, Xpanse, XSOAR)

· Strata NexGen Firewalls

The Palo Alto Strategic Leader and Cloud Security Sales role is not a technical role, but a sales role and the individuals in this role will be expected to be/become a PANW subject matter expert (SME), as it pertains how to work with and do business with PANW. To this end, this role requires the ability to articulate, educate, support and be deemed a valued team member for LCPs and CSS consultants in their assigned Geo, Market and/or Industry.

The Palo Alto Strategic Leader and Cloud Security Sales role is client facing. The Palo Alto Strategic Leader and Cloud Security Sales is expected to work with the LCP and CSS Associate Partner (AP) to understand “lay of the land” of the client, including, but not limited to current sales motions, client/industry needs/issues and priorities that are planned, budgeted or currently out of scope and may require CSS advisory services. In conjunction with the LCP and CSS AP, the Business Development Leader is also expected to seek and engage the appropriate Palo Alto individual or teams to solidify teaming and to drive the development of a comprehensive and credible joint sales plan. The Business Development Leaders are to actively participate in key client facing discussions, as well as associated internal and PANW teaming discussions with the sole purpose of aiding the joint teams to qualify, progress and close joint opportunities.

Geo, Market, or Industry specific responsibilities include:

1. Sales Activation:

a. Evangelize the value of the PANW strategic partnership and sharing best ways of working together within and across all of IBMC, including within CSS

b. Build collaborative relationships across IBMC (LCPs and CSS) to expedite teaming, opportunity identification, and deal progression

c. Build collaborative relationships across PANW sales to expedite teaming, opportunity identification, deal progression, as well as possible removal of obstacles to close

2. Sales Enablement:

a. Work with across both parties to promote and educate sellers

i. CSS on PANW products and value propositions

ii. PANW sellers on the value of working with IBMC and its GTM strategies, capabilities, and value propositions

b. Manage, market, and promote CSS offerings and PANW as part of a broader IBMC client engagement

i. Articulate CSS offerings and PANW products strengths, potential weaknesses, and roadmap

ii. Assist in RFI and RFP responses

iii. Assist PANW in understanding client c-suite (above the CISO) requirements and how that translates to project scoping and pricing needs from PANW

iv. Maintain relationships with the Palo Alto product teams

c. Participate in joint events like RSA, IBM Think, Black Hat, PANW Ignite and others

d. Gather, develop (with marketing assistance) and promote win stories to drive greater sales velocity

3. Sales Engagement:

a. Target and track joint pursuits from identification through close, including loss reporting

b. Establish and maintain relationships with PANW product sales specialists to allow for internal PANW advocacy of client needs as it pertains to new opportunities and rapid issue resolution

c. Leading joint account workshops which includes:

i. Work with PANW and internal IBMC teams to identify opportunities to team – who, what, where, why and how

ii. Share best practices and identify risks, if applicable

iii. Outline a joint sales plan with actions, owners and timeline, assigned to individuals

iv. Establish ongoing cadence for joint read-outs to maintain alignment and communicate revisions to plan

v. Engage executives, as needed

vi. Monitor progress for leadership reporting, monthly and quarterly

d. Refresh as needed, PANW knowledge and/or certifications to maintain SME knowledge of market impact and/or industry trends that drive the need and value of CSS offerings and PANW products

Sample governance activities include:

1. Preparing collateral for Geo / Market specific cadence sessions, monthly reviews, and quarterly business reviews

2. Providing color commentary, e.g.win stories, best practices, lessons learned, issues to be resolved, etc., to pipeline, forecasts, and other internal and/or joint performance reports

3. Monitoring and reporting against individual metrics, showing current assumptions, progress to date and actions needed or anticipated to ensure achievement

The successful candidate will meet the following requirements:

1. Knowledge of the relevant CSS offerings portfolio in terms of the value to the client, to IBMC and to PANW

2. Ability to present the value of the strategic partnership and the CSS offerings to clients, PANW field sellers, and LCPs

3. Knowledge of the PANW product portfolio in terms of their value propositions to the client, to IBMC and PANW

4.Maintain an understanding of competitive products and technologies and accurately position PANW products in competitive scenarios.

5. Complete required online PANW sales training

Support the delivery of day-to-day activities, projects, and programmes. Operate in a highly political and sensitive environment. Monitor, interpret, and quality assure progress against deliverables to NHS England, often requiring adjustments specifically related to the complex corporate business agenda, strategic objectives, and business planning process. Develop business plans and provide expert strategic and policy advice and guidance on all areas of the National Directors portfolio. Proactively manage stakeholders, resolve conflicts through facilitation or other appropriate mechanisms. Lead the team in delivering project plans, allocating tasks, identifying risks, issues, and dependencies, considering best practices, and making decisions in the best interest of the project. Act in compliance with Standing Orders and Standing Financial Instructions, monitor expenditure regularly. Draft detailed reports summarising status on issues, appraising outcomes, and providing progress reports. Analyse, interpret, and present data to highlight issues, risks, and support decision-making. Lead on procurements, ensuring a comprehensive understanding of contract and procurement law

An exciting opportunity has arisen for a Band 8a Public Health Commissioning and Contract Manager to join the Public Health Directorate in the East Region. The post holder will join a team responsible for commissioning and contracting Public Health Section 7a services, including national immunisation programmes, national cancer and non-cancer screening programmes, and Child Health Information Services (CHIS). The successful candidate will be enthusiastic, working in a busy, fast-paced, and varied role that requires a flexible, proactive approach and excellent organisational skills. The ability to work accurately while multitasking is essential.

Applicants must have excellent written and verbal communication skills, the ability to develop and maintain good working relationships both internally and externally, and the ability to work with clinical, managerial, and support staff at all levels. Experience in managing projects such as procurements and service mobilisation, along with a good understanding of the NHS Standard Contract, is essential.

Candidates should also be capable of negotiating and challenging senior stakeholders on difficult issues, planning for short, medium, and long-term objectives, and working to tight and changing timescales. The successful candidate will join a friendly, approachable, and passionate team and will be supported in their own development

The post holder will work as part of a dynamic team in delivering effective services by supporting managers and staff to:
• Lead the programme management of projects delivering public health commissioning outcomes for NHS England.
• Develop effective working relationships across NHS England and with other key stakeholders to ensure commissioned services are effective and meet KPIs and governance requirements.
• Interpret and implement complex national guidance and develop associated policies and guidelines as necessary.
• Contribute to the development of service specifications and the redesign of care pathways to ensure services provide quality and value for money.
• Lead on procurements, ensuring a comprehensive understanding of contract and procurement law.

This role supports the business in driving transformation and value for money in planning, commissioning, and service delivery. It aims to build a combination of subject matter expertise and technical skills to develop strong service delivery

The NHS England board have set out the top-level purpose for the new organisation to lead the NHS in England to deliver high-quality services for all, which will inform the detailed design work and we will achieve this purpose by:
• Enabling local systems and providers to improve the health of their people and patients and reduce health inequalities.
• Making the NHS a great place to work, where our people can make a difference and achieve their potential.
• Working collaboratively to ensure our healthcare workforce has the right knowledge, skills, values and behaviours to deliver accessible, compassionate care
• Optimising the use of digital technology, research, and innovation
• Delivering value for money.

If you would like to know more or require further information, please visit https://www.england.nhs.uk/.

Colleagues with a contractual office base are expected to spend, on average, at least 40% of their time working in-person.

Staff recruited from outside the NHS will usually be appointed at the bottom of the pay band.

NHS England hold a Sponsor Licence; this means that we may be able to sponsor you providing the Home Office requirements are met. To be eligible for sponsorship through the Skilled Worker route you’ll usually need to be paid the ‘standard’ salary rate of at least £38,700 per year, or the ‘going rate’ for your job, whichever is higher. You can find more information on theGovernment website.
• Support the delivery of day-to-day activities, projects, and programmes.
• Operate in a highly political and sensitive environment.
• Monitor, interpret, and quality assure progress against deliverables to NHS England, often requiring adjustments specifically related to the complex corporate business agenda, strategic objectives, and business planning process.
• Develop business plans and provide expert strategic and policy advice and guidance on all areas of the National Director’s portfolio.
• Proactively manage stakeholders, resolve conflicts through facilitation or other appropriate mechanisms.
• Lead the team in delivering project plans, allocating tasks, identifying risks, issues, and dependencies, considering best practices, and making decisions in the best interest of the project.
• Act in compliance with Standing Orders and Standing Financial Instructions, monitor expenditure regularly.
• Draft detailed reports summarising status on issues, appraising outcomes, and providing progress reports.
• Analyse, interpret, and present data to highlight issues, risks, and support decision-making.
• Lead on procurements, ensuring a comprehensive understanding of contract and procurement law


This advert closes on Sunday 3 Nov 2024

Job Objectives:

Tasked with aiding the Security Manager in safeguarding properties and ensuring the well-being of guests, employees, and the hotel. Supervise all activities of security staff to ensure compliance and proper application of department regulations and hotel policies. Documents all action in the department, including: emergencies, loss, theft, or accident.

Primary Responsibilities

• Manages the Security Department, alongside with Security Manager.
• Oversees the security department and their day to day operations.
• Trains all security personnel in their areas of responsibilities.
• Reviews policies, procedures, and instructions on a regular basis.
• Evaluates possible hazards or threats to security.
• Promotes a safety attitude amongst all employees.
• Ensures safety of persons in the hotel and property assets.
• Reports irregularity in employee or guest behavior.
• Handles loss, damage and accidents.
• Handles, documents, and follows up with necessary persons any accidents occurring in the hotel premises.
• Investigates theft as reported by guest or employee.
• Documents all action in the department, including: emergencies, loss, theft, or accident.
• Participates in weekly department heads meeting in absence of Security Manager - Rooms Division Meeting and any others if requested.
• Secondary liaison for interacting with government officials, ministries, and law enforcement agencies.
• Reviews emergency procedures regularly.
• Delivers security training and promotes awareness within the hotel.
• Performs other duties as assigned by Security Manager.

Job Requirements

• Minimum education of High Vocational diploma in any discipline. Bachelor degree holder have an advantage.
• At least 3 years’ experience in a similar position in security & safety operations.
• Basic knowledge of local laws, investigative methods and fire safety.
• Criminal-free record
• Have good English communication skills both in written and spoken
• Possess professional disposition with good communication and interpersonal skills

The purpose of the Palo Alto Strategic Leader and Cloud Security Sales at IBM is to drive net new pipeline development and sales progression of IBM Consulting Cybersecurity Services (CSS) client opportunities that incorporate Palo Alto Networks (PANW)’s technology in the broader solution offered by IBM Consulting (IBMC). These opportunities may be part of an even more comprehensive opportunity that an IBMC Lead Client Partner (LCP) is pursuing with or delivering to the client.

The focus of this role will be to develop new and high value IBMC opportunities for the PANW specific CSS portfolio, which currently includes:

· Threat Management, Cyber Trust, X-Force, and Strategy

· Consulting and Systems Integration (C&SI) services and Managed Security Services (MSS)

The CSS PANW portfolio will include all PANW cybersecurity products, including and not limited to:

· Prisma Cloud

· Prisma Access

· Cortex (XSIAM, XDR, Xpanse, XSOAR)

· Strata NexGen Firewalls

The Palo Alto Strategic Leader and Cloud Security Sales role is not a technical role, but a sales role and the individuals in this role will be expected to be/become a PANW subject matter expert (SME), as it pertains how to work with and do business with PANW. To this end, this role requires the ability to articulate, educate, support and be deemed a valued team member for LCPs and CSS consultants in their assigned Geo, Market and/or Industry.

The Palo Alto Strategic Leader and Cloud Security Sales role is client facing. The Palo Alto Strategic Leader and Cloud Security Sales is expected to work with the LCP and CSS Associate Partner (AP) to understand “lay of the land” of the client, including, but not limited to current sales motions, client/industry needs/issues and priorities that are planned, budgeted or currently out of scope and may require CSS advisory services. In conjunction with the LCP and CSS AP, the Business Development Leader is also expected to seek and engage the appropriate Palo Alto individual or teams to solidify teaming and to drive the development of a comprehensive and credible joint sales plan. The Business Development Leaders are to actively participate in key client facing discussions, as well as associated internal and PANW teaming discussions with the sole purpose of aiding the joint teams to qualify, progress and close joint opportunities.

Geo, Market, or Industry specific responsibilities include:

1. Sales Activation:

a. Evangelize the value of the PANW strategic partnership and sharing best ways of working together within and across all of IBMC, including within CSS

b. Build collaborative relationships across IBMC (LCPs and CSS) to expedite teaming, opportunity identification, and deal progression

c. Build collaborative relationships across PANW sales to expedite teaming, opportunity identification, deal progression, as well as possible removal of obstacles to close

2. Sales Enablement:

a. Work with across both parties to promote and educate sellers

i. CSS on PANW products and value propositions

ii. PANW sellers on the value of working with IBMC and its GTM strategies, capabilities, and value propositions

b. Manage, market, and promote CSS offerings and PANW as part of a broader IBMC client engagement

i. Articulate CSS offerings and PANW products strengths, potential weaknesses, and roadmap

ii. Assist in RFI and RFP responses

iii. Assist PANW in understanding client c-suite (above the CISO) requirements and how that translates to project scoping and pricing needs from PANW

iv. Maintain relationships with the Palo Alto product teams

c. Participate in joint events like RSA, IBM Think, Black Hat, PANW Ignite and others

d. Gather, develop (with marketing assistance) and promote win stories to drive greater sales velocity

3. Sales Engagement:

a. Target and track joint pursuits from identification through close, including loss reporting

b. Establish and maintain relationships with PANW product sales specialists to allow for internal PANW advocacy of client needs as it pertains to new opportunities and rapid issue resolution

c. Leading joint account workshops which includes:

i. Work with PANW and internal IBMC teams to identify opportunities to team – who, what, where, why and how

ii. Share best practices and identify risks, if applicable

iii. Outline a joint sales plan with actions, owners and timeline, assigned to individuals

iv. Establish ongoing cadence for joint read-outs to maintain alignment and communicate revisions to plan

v. Engage executives, as needed

vi. Monitor progress for leadership reporting, monthly and quarterly

d. Refresh as needed, PANW knowledge and/or certifications to maintain SME knowledge of market impact and/or industry trends that drive the need and value of CSS offerings and PANW products

Sample governance activities include:

1. Preparing collateral for Geo / Market specific cadence sessions, monthly reviews, and quarterly business reviews

2. Providing color commentary, e.g.win stories, best practices, lessons learned, issues to be resolved, etc., to pipeline, forecasts, and other internal and/or joint performance reports

3. Monitoring and reporting against individual metrics, showing current assumptions, progress to date and actions needed or anticipated to ensure achievement

The successful candidate will meet the following requirements:

1. Knowledge of the relevant CSS offerings portfolio in terms of the value to the client, to IBMC and to PANW

2. Ability to present the value of the strategic partnership and the CSS offerings to clients, PANW field sellers, and LCPs

3. Knowledge of the PANW product portfolio in terms of their value propositions to the client, to IBMC and PANW

4.Maintain an understanding of competitive products and technologies and accurately position PANW products in competitive scenarios.

5. Complete required online PANW sales training

Job Summary:

The Head of Security Services will lead and manage the security services offered by the Systems Integrator (SI) organization. This role involves developing and executing security strategies, overseeing security operations, and ensuring the protection of client information and infrastructure. The ideal candidate will have extensive experience in security management, risk assessment, and a deep understanding of security technologies and compliance.

Key Responsibilities:

• Develop and implement a comprehensive security services strategy aligned with the organization's objectives and client needs.
• Identify opportunities for expanding security services and developing new offerings based on market trends and client needs.
• Develop and present proposals, including security solutions and cost estimates, to support business development efforts.
• Stay updated on the latest security trends, threats, and technologies to ensure the organization’s security services are cutting-edge and effective.
• Build and maintain strong relationships with clients, understanding their security needs and delivering tailored solutions.
• Serve as the primary point of contact for all security-related matters, ensuring clear communication and alignment with client requirements.
• Collaborate with internal teams and clients to develop and implement security policies and practices.
• Oversee the day-to-day management of security operations, including threat detection, incident response, and vulnerability management.
• Ensure the effective deployment and maintenance of security technologies, including firewalls, intrusion detection systems, and encryption tools.
• Monitor security systems and processes, responding to security incidents and conducting root cause analyses.
• Lead, mentor, and develop a team of security professionals, including security analysts, engineers, and incident responders.
• Foster a culture of security awareness and continuous improvement within the team.
• Provide training and development opportunities to enhance team skills and knowledge.

Qualifications:

• Education:
• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field. A master’s degree or relevant certifications (e.g., CISSP, CISM, CISA) are preferred.
• Experience:
  • Minimum of 8-10 years of experience in security management, with at least 5 years in a leadership role within a systems integration or IT consulting environment.
  • Proven track record of managing complex security projects and client engagements.
• Technical Skills:
  • Extensive knowledge of security technologies, including network security, application security, and data protection.
  • Proficiency in security frameworks and standards (e.g., NIST, ISO 27001).

Key Skills:

• Strong leadership and team management capabilities
• Excellent client-facing and communication skills
• Strategic thinking with the ability to translate strategy into actionable goals.
• Expertise in risk management and incident response
• Ability to manage multiple priorities and projects in a dynamic environment.

Preferred Qualifications:

• Experience with advanced security technologies such as AI-driven threat detection and cloud security solutions.
• Knowledge of industry-specific compliance requirements (e.g., GDPR, HIPAA)
• Experience in a client-facing role within a Systems Integrator (SI) organization.

Position Overview

Assist in managing Infrastructure and IT Security related, for Regional Office (South Asia Ocean Region).

Responsibilities

• Support tRhe Regional Cloud Infrastructure hosting all the Critical Regional Business Solutions.
• Support Cloud Consolidation and Integration to Common Cloud for the Region.
• Plan, Design and Setup adequate Infrastructure for Operation Companies (OPCOs) to connect to Global and Regional Solutions.
• Support various Regional IT Infra projects, with primarily focus on Infrastructure, Elimination of Legacy hosted Infra.
• Support SD-WAN and other Infra Initiatives for the Region.
• Work closely with Global / Regional / Country IT teams to implement & Support Global IT Security Initiatives
• Manage other duties as assigned for Automation of Patch Management (Using Manage Engine), for GSOC, implementing Multi-Factor Authentication (MFA), Zscaler, Rapid 7 (Vulnerability Management), Trend Micro EDR and Others.
• Supporting initiatives advised by Global Security Audit (GSA) teams, resulting in overall improvement of IT Security Posture for the region.
• Assist in Documentation of IT Section Policies.
• Regular PDCA and follow up with Countries, to ensure Adherence for the above Initiatives.

Requirements & Qualifications

• Minimum Bachelor’s degree in IT or related field.
• Minimum 5 to 7 years In-Depth experience in Handling IT Infrastructure & IT Security at a Regional Level.
• Business driven with a Strong understanding of Prevalent / Current IT infrastructure and IT Security Solutions.
• Infrastructure Management and IT Security Skills.
• Cloud Solution Skills with a Must have experience to handle a regional Cloud Setup using AZURE.
• Understanding of relevant technology requirements required to handle the Responsibilities mentioned above.
• Strong Project Management Skills.
• Proven strength in strategic and conceptual thinking and design, implementation, and execution of strategies.
• Strong problem-solving and Co-ordination skills.
• Strong Vendor Management Skills.
• Good verbal and written communication skills.
• Proficient in Microsoft O365 Tools (Word, Excel, PPT and Others)
• Business trravelling may be required for this position.

Job Location

2 Changi South Avenue 2, Singapore 486354

Job title: Public Health & Diagnostics Service Manager Reports to: Operations Director Working Location: Agile Worker Job Purpose The Public Health & Diagnostic Services Manager will be responsible for the safe, smooth, and effective operational oversight and management of the Public Health & Diagnostic Services, which includes: Cervical Screening, Cardiology, Ultrasound and NHS Health checks ensuring the management support is highly effective, visible, and responsive. This role will work closely with the Clinical Leads in order to combine clinical and managerial expertise to drive the services forward. The postholder will be responsible for the development and delivery of high-quality patient-focused and cost-effective pathways, meeting the requirements of our Commissioners and Fed strategy. The postholder will develop and provide a working environment and open culture which fosters high morale and commitment among staff and promotes their wellbeing, professional and personal development. As the Public Health & Diagnostics Service Manager, the post holder will take ownership for the budgeting, service development and workforce planning of the services. The post holder will provide advice and support at a senior level for the specialist leads, and will work closely with the Head of Federation Services and other Service Managers to maintain clinical excellence and improve services. Main Duties & Responsibilities To be accountable for the operational management and running of the Federations Public Health & Diagnostic Services. To manage, monitor and be accountable for budgets for the service to ensure financial balance at the end of the year, and to ensure that monthly positions are reviewed and actioned alongside support from the Federation Finance team. To manage and monitor performance, in partnership with the Operations Director so that the services meet financial targets Please see attached job description for full version.

Job Summary

We are currently looking for a seasoned leader as the Head of IT Security. The incumbent will be responsible for leading the transformation while establishing and maintaining the enterprise vision, strategy, and program to ensure information assets and technologies are adequately protected. This role oversees the development and implementation of security policies, standards, and procedures to ensure the protection of the organization's information systems and data.

Mandatory Skill-set

• Degree in Computer Science, Information Security, Information Systems or a related field;
• At least 12-15 years of experience in IT security & risk management preferably in a large scale organisation;
• Deep knowledge and understanding of internal controls, security frameworks, risk management and IT governance, auditing techniques, threat modeling and risk management principles;
• Good knowledge of enterprise IT systems and components (applications, operating systems, databases, networks, cloud, DevOps;
• Knowledgeable in using various cyber security monitoring and analysis tools and techniques depending on the organization's needs and requirements;
• Familiarity with security technologies such as firewalls, intrusion detection systems, and endpoint protection;
• Familiar with cyber security standards, protocols and frameworks such as NIST, CIS, PCI/ DSS, MAS TRM, ISO standards;
• Experience with Security operations centers (SOC) and setting up SOC models;
• Experience in driving enterprise initiatives for E2E security posture analysis;
• Ability to work with subsidiaries and understand regional security requirements;
• Strong in analytical thinking with attention to detail;
• Excellent communication and inter personal skills.

Desired Skill-set

• CISSP, CISM, CRISC, CGEIT and/or CISA certified.

Responsibilities

• Define and implement the Enterprise InfoSec (IS) landscape and roadmap;
• Responsible for documenting methodologies and tools to mitigate information security or cyber risk for on-prem and clous platforms;
• Prepare reports for information security or cyber risk related reporting, threat awareness and security awareness reports;
• Design and implement secure cloud architecture for various cloud platforms and act as an SME for cloud platforms (AWS, GCP, or Azure) using cloud-native security services;
• Recommend corrective actions or appropriate security controls to mitigate technical risk;
• Conduct Technology Security Risk Assessments on systems throughout their lifecycle to identify and mitigate security risks;
• Assist in the development of policies for conducting cyber security risk assessments and compliance audits;
• Formulate governance procedures for documenting and updating security policy, standards, guidelines and procedures;
• Perform information security or cyber risk assessment activities and assess third party security controls and internal security systems including onsite assessments;
• Establish scope of risk analysis for new technology initiatives and identify security risks in the Tech Obsolescence Risk program;
• Communicate with regulators such as MAS and ensure solutions meet external and internal requirements and guidelines
• Keep abreast of the dynamic cyber threat landscape and identify opportunities for enhancement of IT risk processes;
• Provide regular updates on the overall health of compliance, criticality assessment, audit findings, remediation and action plans.

Should you be interested in this career opportunity, please send in your updated resume to apply@sciente.com at the earliest.

When you apply, you voluntarily consent to the disclosure, collection and use of your personal data for employment/recruitment and related purposes in accordance with the SCIENTE Group Privacy Policy, a copy of which is published at SCIENTE’s website (https://www.sciente.com/privacy-policy).

Confidentiality is assured, and only shortlisted candidates will be notified for interviews.

EA Licence No. 07C5639

Permanent – Full Time – Happy to talk Flexible and Agile Working

Would you like to work for a progressive and ambitious company which is also one of the most successful within the UK construction industry?

If so, this could be the role for you!

Due to the increased volume of Secure Projects within our Construction business, we are now seeking a Security Manager to join us!

About the Role

The Security Manager role exists to support Morgan Sindall Construction in complying with its obligations to meet legislative and Government compliance requirements in relation to Classified projects.

You’ll serve as the authority for data classification and management within the organisation. The role will be critical in ensuring the protection of sensitive client data, particularly data classified as Official Sensitive, and mitigating the risk of inadvertently creating Secret classified data through data aggregation processes. You’ll collaborate closely with client requirements outlined in Security Aspect Letters (SALs). Additionally, the Security Manager will ensure the security vetting process in MSC is consistent and fit for purpose for colleagues up to SC level clearance, liaising with Internal and Government vetting teams to ensure compliance.

This is a National role, meaning you can be based at any of out offices. There will however be a need to travel within the UK as required.

About You

We’d like our Security Manager to have a high level of personal integrity and discretion and the ability to hold/attain and maintain a HMG security clearance at a minimum of SC level. You’ll have proven experience in data security management, preferably within the construction industry, and have an in-depth knowledge of data classification methodologies and regulatory requirements, particularly in handling Official Sensitive and Secret classified data.

With strong negotiation skills and experience of collaborating with clients and stakeholders to develop security management plans, you will be proficient in conducting Data Protection Impact Assessments (DPIAs) and implementing recommended controls. You’ll be experienced in coordinating security vetting processes, including SC level clearance, with government agencies, and have good communication skills, able to convey complex technical concepts to non-technical audiences.

Benefits

We strive to support our colleagues to achieve a healthy work-life balance. We understand that many of our people have family and personal responsibilities and so we are committed to providing that support. Pension Scheme matched up to 6%; 26 days holiday plus bank holidays and rising to 30 days after 8 years’ service and the holiday plus scheme; Private Healthcare Cover; Life Assurance up to 4 times your basic salary; Recognition for professional qualification/membership achieved up to £1000; Mental Wellbeing and Employee Supports; People Portal for high street discounts; Long Service Awards; Sharesave Plan; Incentive Scheme; Enhanced Family leave and more!

About Us

Morgan Sindall provides national construction and infrastructure services to private and public sector customers across a comprehensive range of markets. We aim to create great results for our customers, partners and ourselves. Our Leadership are focused on building a sustainable and profitable business unit based on selective, relationship-based business driven by outstanding people who are motivated by delivering an exceptional customer experience. Relationships with our customers and supply chain partners drives our business strategy. We have a balanced approach to securing new work, engaging with customers and frameworks that offer the opportunity for long-term relationships and repeat business.

Please refer to the full Job Description upon completing your application.

At Morgan Sindall Construction, we encourage diversity of people and thought, and we embrace peoples’ differences.

Everyone is unique and we value the different ideas, experiences, and perspectives that each individual brings to their work, their team, and the wider business.

We are committed to ensuring we create the very best place to work in the industry, and an environment where every person feels included and is treated equally, fairly and with respect.

We actively promote an inclusive culture where you can be yourself at work. It’s this approach we believe brings out the best in everyone and creates a fun, dynamic, innovative, and rewarding environment.

Morgan Sindall is an equal opportunities employer and has been accredited with the Positive About Disabled People ‘Two Ticks’ accreditation. We are also an Investors in People company.

Senior Manager, Or Manager - Cyber Security & IT Governance

Responsible for the assessment, development, implementation and maintenance of enterprise-wide cyber security and IT Governance programmes to preserve the confidentiality, integrity, and availability of information resources. As part of the IT leadership team, this individual will be expected to provide technical leadership and consultation across the organisation. S/he will also work with external experts to implement security solutions, detect, and contain cyber security incidents.

Responsibilities

Cyber Security:

Assess and review environment and cybersecurity measures to ensure security and operational effectiveness, for e.g. network, system, application, endpoint security, physical and logical access security, etc.

Review and develop security framework, information security policies, processes, procedures, and guidelines.

Conduct cybersecurity risk assessments, penetration tests, and IT controls tests.

Identify security gaps and propose mitigating measures and escalate security incidents and non-compliances on a timely basis.

Evaluate, deploy, and maintain cybersecurity infrastructure to improve cybersecurity posture. Design, implement and maintain security incident response and escalation procedures.

Monitor, analyze and correlate events to determine the best course of action, to mitigate and contain threats when detected.

improve cybersecurity awareness of staff, for e.g. by conducting awareness training. Automate security controls, data, and processes.

IT Governance:

Review and enhance IT policies, standards, guidelines, and best practices regularly to ensure that these are aligned to organization objectives and industry best practices.

Develop and implement effective change management plans (such as communication plans and training programs) to drive adoption and compliance.

Participate in audit planning meetings with internal/external auditors, collate/provide the required materials on a timely basis, validate audit findings, provide remediation solutions, and implement the agreed solutions on a timely basis.

Drive security access and activity log reviews on regular basis.

Promote IT risk management, governance, and compliance culture across the organization.

IT Management:

Contribute to IT strategic planning and budgeting. Ensure IT vendors meet contractual obligations.

Maintain up-to-date knowledge on cybersecurity technologies and standards.

Attend to any other reasonable duties as assigned by Director, Information Technology.

Requirements

Degree in engineering, science or information technology, or equivalent education.

8-10 years of related work experience in cybersecurity management and security governance.

Good working knowledge of security risk management, security governance framework and compliance (IT Security Audit / log review), technical vulnerability management (vulnerability assessment, penetration testing), application security, security technologies (system hardening, IDS/IPD, firewall), security incident response and security assessment.

Strong understanding of cybersecurity standards.

Hands-on experience with cybersecurity tools such as Next Generation Firewalls, SASE, Endpoint Protection, Data Loss Protection, Email Security, etc.

To apply:

Please email Resume in Microsoft Word format

Please state your Position/ positions applied on the “on TOP” of your resume.

Please state Available Commencement Date or notice period

Please state current and last SALARY and Expected Salary in your resume.

Please state Reasons for leaving current & previous Employment.

Job Objectives:

Tasked with aiding the Security Manager in safeguarding properties and ensuring the well-being of guests, employees, and the hotel. Supervise all activities of security staff to ensure compliance and proper application of department regulations and hotel policies. Documents all action in the department, including: emergencies, loss, theft, or accident.

Primary Responsibilities

• Manages the Security Department, alongside with Security Manager.
• Oversees the security department and their day to day operations.
• Trains all security personnel in their areas of responsibilities.
• Reviews policies, procedures, and instructions on a regular basis.
• Evaluates possible hazards or threats to security.
• Promotes a safety attitude amongst all employees.
• Ensures safety of persons in the hotel and property assets.
• Reports irregularity in employee or guest behavior.
• Handles loss, damage and accidents.
• Handles, documents, and follows up with necessary persons any accidents occurring in the hotel premises.
• Investigates theft as reported by guest or employee.
• Documents all action in the department, including: emergencies, loss, theft, or accident.
• Participates in weekly department heads meeting in absence of Security Manager - Rooms Division Meeting and any others if requested.
• Secondary liaison for interacting with government officials, ministries, and law enforcement agencies.
• Reviews emergency procedures regularly.
• Delivers security training and promotes awareness within the hotel.
• Performs other duties as assigned by Security Manager.

Job Requirements

• Minimum education of High Vocational diploma in any discipline. Bachelor degree holder have an advantage.
• At least 3 years’ experience in a similar position in security & safety operations.
• Basic knowledge of local laws, investigative methods and fire safety.
• Criminal-free record
• Have good English communication skills both in written and spoken
• Possess professional disposition with good communication and interpersonal skills