Information Security Manager

Hemel Hempstead, England, United Kingdom

Smiths Detection is a global authority on the application, management and manufacture of world class detection and screening technology. Every minute of every day, our detection and screening technology helps to protect people and infrastructure, making the world a safer place.

Our goal is simple – to provide the security, peace of mind and freedom of movement upon which the world depends. We deliver the solutions needed to protect society from the threat and illegal passage of explosives, prohibitive weapons, contraband, toxic chemicals and narcotics.

Based at our Centre of Excellence in Hemel Hempstead, as Information Security Manager for NW Europe, you will be the individual responsible for ensuring that Smiths Detection maintains an Information Management System that is appropriate for the span and scale of our business.

We are hybrid, site based 3 days a week. Please reach also reach out, to discuss part-time options for this role.

This is a high profile, exciting and diverse role that will oversee activities to ensure that we manage our physical, personnel, enterprise IT and product security risks effectively.

You will be the lead for Information Security activities drawing on the expertise and skills of our global and local teams and provide a re-assuring presence to our high-profile customer base.

Duties & Responsibilities

Development and maintenance of the Smiths Detection Information Security Management System for NW Europe.

Ensure that National and Customer security policies are being correctly and appropriately applied.

Work collaboratively with our Group Business Information Service team, other Divisional Security Managers to ensure that the services that they provide meet the needs of the NW Europe business and our customers

Work collaboratively with Technology and Product Development teams to ensure that our services and products meet the Information Security and Cyber needs of customers.

Principal point of contact for customers on Information and Cyber security matters.

Present risk balanced security solutions to problems and provide clear advice directly to Directors.

Lead our company’s activity required for relevant accreditations such as MOD DART, ISO 27001 and Defence Cyber Essentials.

Support Business development and tender activity to drive growth within NW Europe.

Representing the Information interests of the NW Europe business within the wider Detection Division.

About you

Proven track record of effective leadership with excellent interpersonal and influencing skills across a wide range of stakeholders in direct and matrixed environments

A thorough working knowledge of all aspects of the Security Policy Framework / GOVS 007 as well as JSP 440

Experience of securing and maintain ISO27001 and MOD accreditation.

Good practical understanding of the general requirements necessary to maintain compliance with the General Data Protection Regulations (GDPR).

Experience of producing accurate security risk assessments and being able to recommend proportionate mitigations and solutions to risk and vulnerabilities.

Experience of maintaining compliance with CPNI requirements and adopting the Operational Requirements process and conducting Threat and Vulnerability Assessments.

Capable of maintaining relevant UK National Security clearances

Hold one or more the following: CompTIA, GIAC Security Essentials (GSEC), NIST Cybersecurity Framework (NCSF), Offensive Security Certified Professional (OSCP), Certified Ethical Hacker (CEH), Certified Information Security Manager (CISM), Certified Cloud Security Professional (CCSP), Certified Information Systems Security Professional (CISSP), Certified Protection Professional (CPP), Industrial Security Professional (ISP)

Desirable Skills

Expert in security concepts for IT network architectures, applications, cloud services and hardening of operating systems

Excellent problem-solving skills with an appreciation for root-cause analysis and remediation

Ability to bring people together to form a motivated team and create an environment of continuous improvement

Strong communication skills

Ability to be both a people manager and a strong team player

Qualification to a degree level or equivalent in a related subject matter

Diversity & Inclusion

We believe that different perspectives and backgrounds are what make a company flourish. All qualified applicants will receive equal consideration for employment regardless of race, color, religion, sex, sexual orientation, gender identity, national origin, economic status, disability, age, or any other legally protected characteristics. We are proud to be an inclusive company with values grounded in equality and ethics, where we celebrate, support, and embrace diversity.

We have several employee-led Employee Resources Groups (women@work, Black Employees Network, Veterans, Pride Network) providing support, enhancing career development, and contributing to personal development in the work environment and beyond.

At no time during the hiring process will Smiths Detection, Smiths Group, nor any of our recruitment partners ever request payment to enable participation – including, but not limited to, interviews or testing. Avoid fraudulent requests by applying jobs directly through our career’s website ( www.smithsdetection.com/careers )or LinkedIn