Location
Canary Wharf, London

Hours
Flexible working patterns available

Salary
£75,000 per annum

About the Role
We're looking for a pragmatic, risk-focused Information Security Manager to work within Nest and maintain our ISO 27001 certified Information Security Management System (ISMS). As part of the second line of defence, you will advise the business on security risks, incidents, audits, assurance, and the implementation and monitoring of security controls that protect Nest. You will have a solid background in information security management systems and technology, and you will enjoy communicating technical concepts to non-technical people.

Key Responsibilities
Ensure the operation of the ISMS for the Corporation, enabling first line business teams to deliver objectives in line with agreed risk appetites. Work across all internal Nest departments, programmes, projects, and initiatives, providing oversight, support, and challenge.

Reward and Recognition
- A discretionary bonus scheme
- Reward and recognition scheme
- Enhanced auto-enrolled pension with contributions starting at 5% from you and up to 10% from us based on your contributions
- Income protection scheme providing income if you cannot work due to illness or incapacity.

Flexible and Agile Working
We offer various working arrangements, including a hybrid of office and home working, reduced or varied hours, compressed hours, and job sharing.

Experience
- Practical experience of operating certified ISMS using ISO 27001/2, NIST CSF, and other security standards in the design and management of information security controls.
- Experience working with third-party suppliers to audit and evidence compliance with security policies and standards.

About You
Understanding and experience in various Information Security domains including Security Architecture, Information Security Governance, Network Security, Data Protection, Risk Management, Identity & Access Management, Vulnerability Management, Anti-Malware, Mobile Device Management, and Cloud Security. We welcome all applicants and are good at spotting potential, offering a generous training budget.

Qualifications
No specific qualifications are required, but a strong background in information security management is essential.