Are you an experienced Information Security professional? Looking for an opportunity to join an exciting Rail organisation who are looking to become more Cyber Mature?

Ford & Stanley - Experts in Digital are working with their client based in Derby to recruit an Information Security Engineer to join their team on a 1-year FTC. This role could also be remote based for the right candidate

The Role

The Information Security Engineer will be responsible for designing and maintaining processes and technologies for data security. This individual will use their expertise in supporting the upkeep and development of an Information Security Management System (ISMS) alongside the Information Security Manager (ISM), in alignment to ISO 27001 guidelines. The Engineer will analyse and respond to software and hardware vulnerabilities, and work alongside the wider IT team to maintain IT security compliance and best practice. Whilst addressing vulnerabilities, security procedures will be followed and developed further to ensure my client are operating an optimal security environment.

Key Responsibilities

• Maintain security control systems and policy configuration to protect from unauthorised access, disclosure, modification and deletion of information through resources and systems.
• Interact with IT technical specialists to guide on confidentiality, integrity, availability, authentication, authorisation and auditing solutions.
• Work closely with the Infrastructure team with project scoping and implementations.
• Interact with business units in relation to varying business plans and projects, ensuring information security issues are responded to throughout project management lifecycles.
• Investigate known and suspected information security events and develop incident reports.
• Recommend changes in line with legal, technical and regulatory information security guidelines and requirements
• Perform technical security reviews and testing to ensure new technologies conform with my client's security compliance policies and standards.
• Resolve issues through responding to IT threats and vulnerabilities.
• Be a subject matter expert for my clients physical and logical security architecture, configuration and implementation.
• Be a communication and escalation point internally for addressing business security issues, producing problem reports and developing solutions.
• Implementation of the Information Security Strategy and supporting programme plan as directed by the Information Security Manager.
• Liaise with the business, and Group security function. Where necessary, work closely with the Internal and Group Audit teams to support the delivery of annual assurance and compliance plan.

The Ideal Candidate

• Excellent verbal and written communication skills and ability to communicate and build relationships with individuals at all levels.
• Excellent analytical skills, together with attention to detail and can use their own initiative in a fast-paced environment.
• Understanding of the ISO 27001 standard, the General Data Protection Regulation (GDPR) and PCI DSS.
• Awareness of the Security of Network & Information Systems (NIS) Regulation.
• Expertise in infrastructure security delivery particularly in complex environments on premises, cloud and through 3rd party suppliers.
• A technical security mind-set and the desire to work in a fast-paced environment that proactively seeks out solutions to problems.
• A sense of responsibility and ownership in driving IT security best practices.
• Understanding of routing and switching and TCP, IP and other routing protocols.
• Experienced in the design and testing of common security solutions, ie. Firewalls, VPNs and IDS/IPS solutions, email and web security gateways etc.