Nexus Jobs Limited
Information Security Manager with Infrastructure Engineering Skills Our Client is bank based in Central London who are looking to recruit a seasoned professional with at least 7 to 10 years expertise level Information Security coupled with Hands-on Network Engineering. The role is mainly Information Security – Data Security and split circa 80% with 20% Network Engineering – so you do need to be hands-on technically. You will ideally have circa 5+ years of work experience with Network Engineering coupled with over 10 years experience with Cisco Systems Products Role Description The Information Security Manager with Network Engineering Skills is a full-time, hybrid role based in London with some flexibility for work from home. This role is responsible for overseeing the organization's information security posture, managing the Information Security Management System (ISMS), and ensuring policies and controls comply with relevant standards and regulations. Day-to-day tasks include assessing security risks, monitoring network security, coordinating incident response activities, and working closely with IT and business stakeholders to implement technical and procedural safeguards. The manager will also design and review secure network architectures, support security audits and penetration tests, and provide guidance and training on cybersecurity best practices across the organization. Qualifications · Strong skills in Information Security Management and Information Security, with experience defining and enforcing security policies and procedures. · Hands-on experience with Information Security Management Systems (ISMS), including implementation, maintenance, and continuous improvement in line with industry standards (e.g., ISO 27001). · Proficiency in Cybersecurity and Network Security, including secure network design, firewalls, VPNs, intrusion detection/prevention, and vulnerability management. · Background in network engineering or administration, with practical experience configuring and troubleshooting routers, switches, and related infrastructure. · Knowledge of relevant regulatory and compliance frameworks (such as GDPR and other data protection requirements). · Ability to lead security initiatives, collaborate with cross-functional teams, and communicate complex technical concepts to non-technical stakeholders. · Experience with security monitoring tools, SIEM platforms, and incident response processes. · Bachelor's degree in computer science, information security, engineering, or a related field, or equivalent professional experience. · Relevant certifications (e.g., CISSP, CISM, NIST, CCNP Security, ISO 27001 Lead Implementer) are advantageous. Key Networking Skills Required: Cisco Network Switches Layer 2 and 3 (Catalyst 9K) – CCNP Level, Expert Level Preferred Routing protocol – OSPF (Catalyst 9K) – CCNP Level, Expert Level Preferred Cisco Switch Stacking (Cat 9K Switches 9600, 9300. 9200) Virtual Routing and Forwarding – (Catalyst 9600) Internetworking Troubleshooting - CCNP Level, Expert Level Preferred High Availability and Disaster Recovery - CCNP Level, Expert Level Preferred Security/Cyber Security Skills Required: Cisco Firepower Firewalls (ASA, FTD) - CCNP Level, Expert Level Preferred Palo Alto Firewalls – Specialist Level, Architect Level Preferred Cisco Layer 2 Port Security Network Access Control including Cisco ISE, TACACS etc. Network Detection and Response Network Encryption (Site to Site VPN's) Cisco Secure Client (ASA) Network IPS (Trellix) Network Zero Day (Trellix NX or similar) Host Zero Day (Trellix HX or similar) Cyber Security Network Control Incident Investigation with the assistance of group cyber security experts – Tier 1, Tier 2 to 3 preferred, using LogRhythm SIEM a bonus Host End Point Protection (Symantec) Host IPS Preferred Skills and Knowledge Vulnerability Management (Scanning for Vulnerabilities and classifying the risk, CIS Benchmark Scanning and compliance) – Using Rapid7 a bonus Knowledge of Penetration Testing, understanding of the types of testing and their advantages and disadvantages Security Zone Design and considerations Network and Security Architecture Design and Considerations Understanding of Information Security (Confidentiality, Integrity, Availability), MITER ATT&CK, NIST, ISO 27001, SIEM use cases for key controls etc Risk Management in Cyber Security, SSL Blind spots, what causes them and how to mitigate Malware/Ransomware and how to mitigate along with Penetration testing concepts Understanding of White/Black/Grey Box penetration testing. Developing Security policies and procedures and conducting audits/risk assessments Handling crisis situations during security incidents The role is hybrid 3 days in the office in Central London. The salary for this role will be in the range £75K - £95K + Benefits. Do send your CV to us in Word format along with your salary and notice period.
