Information Security Manager, Multiverse

• Experience leading security engineering teams Secure By Design / Privacy By Design
• You will have lived experience of running/being part of security operations such as running security operation centres, responding to security incidents/breaches, overseeing patching/vulnerabilities or hardening systems
• Comfortable working at pace to deliver systems and security designs, patterns and decisions
• Experience managing team ways of working and ownership of work items
• ​​From a leadership perspective you will understand the power of diverse thought, kindness, humanity, creating the conditions for success, learning from failure
• Experience working with senior stakeholders, working between multiple teams, building complex services in code and working in a culture of continuous release
• Prepared to respond to security incidents to minimise the impact on the business,
• Experience supporting Governance, Risk and Compliance across the business, enforcing compliance with key data and security policies
• Supplier Assurance – supply chain security, completing client Self Assurance Questionnaires (SAQ)
• Expertise in planning and delivering roadmaps, contributing to our cloud security strategy
• Good understanding of security risk management in a cloud security context, and of cloud security principles
• Knowledge of multiple regulatory requirements e.g UK GDPR, CCPA
• Expertise in security and compliance frameworks and standards, e.g. CE+, NIST SP 800-207

Desirable

• As an Information Security Manager at Multiverse, you will support our Infosec Director and Privacy team to help us secure our modern cloud native platforms
• You will help by securing work delivered by dev ops engineers, IT operations (end user computing), suppliers, and support client security requirements
• Help to build and scale out a secure engineering culture, working with teams to embed secure engineering practices & secure–by–design principles
• Review the security posture of our cloud platforms and identify cloud security risks and issues and work with our platform and product teams to improve our platforms
• Deliver clear recommendations for building security capabilities to deliver security policy and compliance objectives
• Lead internal learning sessions, giving our security champions help and support to improve their security knowledge
• Conduct maturity assessments of application security practices
• Improve security culture and awareness program for Engineering / IT Operations / Business Teams
• Support our sales teams / clients with timely completion of Self Assurance Questionnaires (SAQ) accurately at pace
• Review client contracts for security/privacy requirements, assessing compliance posture and suggesting mitigations if required
• Manage delivery of security tooling
• Produce Documentation - documenting standard operating procedures (SOPs), Policy reviews and updates
• Secure critical business products/services to internal requirements in line with good practise and to meet client expectations