Information Security Manager, Thriva

• Experience in the IT or InfoSec field with 2+ years of experience as an operations manager or service lead within the IT field
• Strong experience with leading and operating employee support and change management programmes
• Experience being a people manager and knowing how to manage the needs of the team while meeting business objectives in an agile environment
• Hands-on experience with owning common employee productivity SaaS tooling such as Google Workspaces, Okta, Jira, and similar technologies
• The ability to see the big picture, define plans that align to business goals and set measurable metrics
• Ability to manage multiple/varied tasks and prioritise workload with attention to detail
• Comfortable operating autonomously once goals and objectives are set
• Strong interpersonal and organisational skills, with the ability to successfully work both independently and effectively within a team
• Strong leadership capability, executing as appropriate in the areas of responsibility
• Excellent oral and written communication skills, including the ability to explain technology solutions to non-technology internal client base
• Proven ability to engage constructively with colleagues at all levels across different departments to deliver objectives
• Ability to quickly establish credibility and build rapport and trust
• Experience of security auditing and monitoring

Desirable

• Developing and implementing policies, procedures, and strategies to protect our organisation's confidential data and systems from unauthorised access, use, disclosure, and destruction
• Ensuring compliance with all policies and maintaining strong audit trails
• Pushing information security improvement and maturity across the organisation to better serve teams and customers
• Maintaining ISO 27001 certification
• Conducting internal audits and leading on external audits
• Managing risks using the correct controls
• Engaging with internal/external stakeholders on security incidents, queries, etc
• Managing business continuity and disaster recovery policies/procedures/schedules
• Leading Access Management improvements and initiatives
• Overseeing access management recertification programmes
• Managing cross-functional projects to drive Identity and Access Management (IAM) objectives
• Providing operational data protection compliance support
• Line management of one team member with workplace IT responsibilities