9 jobs found

Chief Information Security Officer (CISO) Tesco Mobile About the role Are you ready to step into a CISO position? Tesco Mobile is seeking a dedicated Security professional to join as their Chief Information Security Officer (CISO) who will have a significant role in crafting the future of our cyber security landscape. This is an outstanding opportunity to lead a world-class cyber security strategy within a dynamic and evolving business environment. By joining Tesco Mobile, you will be at the forefront of ensuring flawless security measures that protect our customers and business operations. You will report to Tesco Mobile's General Counsel and be part of our Cyber Security Chapter. You will collaborate with experts from Legal, Regulatory, Compliance, and Risk Management within our Business Integrity Centre of Excellence. You will be responsible for Key responsibilities: Be the face of security. Cultivate positive relationships, promote security, and discover opportunities for security to make valuable contributions within the business. Understand the security posture of the business and its processes in order to effectively engage them in the security improvement recommendations and cyber risk management. Be responsible for leading the cyber security strategy within the business and present risk-based security position and recommendations to management and executive teams. Drive the information security improvement plans which includes incorporating Tesco Group security requirements. Ensure adequate registration, analysis, resolution and reporting of privacy and information security incidents. Craft and coordinate information security assessments, pen testing, reviews and audits. Provide technical oversight of all security tooling and infrastructure services in use; Make recommendations on configuration and implementation improvements. Own third party vendor management for security services. Monitor and respond to emerging threat patterns, vulnerabilities and anomalies. Responsible for collaborating with the Tesco Group Security Operations team to help ensure the entire Tesco Group are protected against emerging threats. Ensure sufficient security assurance between collaborators (i.e. Tesco, Tesco Mobile, and Virgin Media O2) regarding cyber security for Virgin Media O2. You will need Extensive knowledge and experience in Cyber/Information Security to effectively collaborate with and support various collaborators. Strong working knowledge of security management principles and practices, including vulnerability management, event management, application security, Identity management, incident response. Excellent collaborator and ability to inspire change. Demonstrated ability to engage with a diverse set of collaborators and foster a security culture. Detail-oriented individual with a strong analytical background. Ideally previously hands on role in one of these domains, networks, sysadmin, software developer, security analyst. Security qualifications such as CISM, CISSP, CISA or equivalent. What's in it for you We're all about the little helps. That's why we make sure our Tesco colleague benefits package takes care of you - both in and out of work. Annual bonus scheme of up to 45% of base salary. Car Cash Allowance. Holiday starting at 25 days plus a personal day (plus Bank holidays). Private medical insurance. Retirement savings plan - save between 6% - 10% and Tesco will contribute 1.5 times this amount. 26 weeks maternity and adoption leave (after 1 years' service) at full pay, followed by 13 weeks of Statutory Maternity Pay or Statutory Adoption Pay, we also offer 6 weeks fully paid paternity leave. About us Our vision at Tesco is to become every customer's favourite way to shop, whether they are at home or out on the move. Our core purpose is 'Serving our customers, communities and planet a little better every day'. Serving means more than a transactional relationship with our customers. It means acting as a responsible and sustainable business for all stakeholders, for the communities we are part of and for the planet. Diversity, equity and inclusion (DE&I) at Tesco means that whoever you are and whatever your background, we always want you to feel represented and that you can be yourself at work. In short, we're a place where Everyone's Welcome . We're proud to have been accredited Disability Confident Leader and we're committed to providing a fully inclusive and accessible recruitment process. For further information on the accessibility support we can offer, please click here. We're a big business and we can offer a range of diverse full-time & part-time working patterns across our many business areas, which means that we can find something that works for you. We work in a more blended pattern -combining office and remote working. Our offices will continue to be where we connect, collaborate and innovate.

About the role Are you ready to step into a CISO position? Tesco Mobile is seeking a dedicated Security professional to join as their Chief Information Security Officer (CISO) who will have a significant role in crafting the future of our cyber security landscape. This is an outstanding opportunity to lead a world-class cyber security strategy within a dynamic and evolving business environment. By joining Tesco Mobile, you will be at the forefront of ensuring flawless security measures that protect our customers and business operations. You will report to Tesco Mobile's General Counsel and be part of our Cyber Security Chapter. You will collaborate with experts from Legal, Regulatory, Compliance, and Risk Management within our Business Integrity Centre of Excellence. You will be responsible for Key responsibilities: Be the face of security. Cultivate positive relationships, promote security, and discover opportunities for security to make valuable contributions within the business. Understand the security posture of the business and its processes in order to effectively engage them in the security improvement recommendations and cyber risk management. Be responsible for leading the cyber security strategy within the business and present risk-based security position and recommendations to management and executive teams. Drive the information security improvement plans which includes incorporating Tesco Group security requirements. Ensure adequate registration, analysis, resolution and reporting of privacy and information security incidents. Craft and coordinate information security assessments, pen testing, reviews and audits. Provide technical oversight of all security tooling and infrastructure services in use; Make recommendations on configuration and implementation improvements. Own third party vendor management for security services. Monitor and respond to emerging threat patterns, vulnerabilities and anomalies. Responsible for collaborating with the Tesco Group Security Operations team to help ensure the entire Tesco Group are protected against emerging threats. Ensure sufficient security assurance between collaborators (i.e. Tesco, Tesco Mobile, and Virgin Media O2) regarding cyber security for Virgin Media O2. You will need Extensive knowledge and experience in Cyber/Information Security to effectively collaborate with and support various collaborators. Strong working knowledge of security management principles and practices, including vulnerability management, event management, application security, Identity management, incident response. Excellent collaborator and ability to inspire change. Demonstrated ability to engage with a diverse set of collaborators and foster a security culture. Detail-oriented individual with a strong analytical background. Ideally previously hands on role in one of these domains, networks, sysadmin, software developer, security analyst. Security qualifications such as CISM, CISSP, CISA or equivalent. What's in it for you We're all about the little helps. That's why we make sure our Tesco colleague benefits package takes care of you - both in and out of work. Click Here to find out more! Annual bonus scheme of up to 45% of base salary. Car Cash Allowance. Holiday starting at 25 days plus a personal day (plus Bank holidays). Private medical insurance. Retirement savings plan - save between 6% - 10% and Tesco will contribute 1.5 times this amount. 26 weeks maternity and adoption leave (after 1 years' service) at full pay, followed by 13 weeks of Statutory Maternity Pay or Statutory Adoption Pay, we also offer 6 weeks fully paid paternity leave. About us Our vision at Tesco is to become every customer's favourite way to shop, whether they are at home or out on the move. Our core purpose is 'Serving our customers, communities and planet a little better every day'. Serving means more than a transactional relationship with our customers. It means acting as a responsible and sustainable business for all stakeholders, for the communities we are part of and for the planet. Diversity, equity and inclusion (DE&I) at Tesco means that whoever you are and whatever your background, we always want you to feel represented and that you can be yourself at work. In short, we're a place where Everyone's Welcome . We're proud to have been accredited Disability Confident Leader and we're committed to providing a fully inclusive and accessible recruitment process. For further information on the accessibility support we can offer, please click here . We're a big business and we can offer a range of diverse full-time & part-time working patterns across our many business areas, which means that we can find something that works for you. We work in a more blended pattern - combining office and remote working. Our offices will continue to be where we connect, collaborate and innovate.

Prism Digital Information Security Analyst - SIEM - Famous Arts Institution A world-renowned arts institution based in South Kensington is looking for a Cyber Security Analyst You will be joining an IT department of circa 20 staff. Your role will be as a very hands on IT Security specialist to maintain the internal and external security of the business at a large scale; 3,000 devices and 1,200 end users. You will be responsible for the day-to-day actions that will ensure the established information security policies are adhered to by all staff and all systems. You will monitor all security and compliance systems regularly taking action where required or ensuring that others who are responsible for those systems are taking appropriate action. Main tasks: * Lead the development, documentation and maintenance of information security policies, procedures, and standards across the organisation * Proactively initiate, facilitate, and promote activities to create awareness of information security * Assist in system and software architecture and design to ensure that data and assets remain secure at all times * Perform Information Security Risk Assessments of all new systems implemented * Perform regular risk assessments and work closely with auditors to pre-empt, mitigate, and swiftly respond to any audit findings * To investigate suspected and actual security incidents in accordance with the security incident management standard, produce reports with recommendations and ensure any remedial action is taken * Work with the IT Security Manager to implement and maintain the Information Security Management System (ISMS) * Manage the Security Information and Event Management system (SIEM) and other security systems ensuring appropriate actions are taken for all issues flagged for action by the system * Monitor all security compliance reporting ensuring appropriate actions are taken in response to the report details and escalating issues as required * Monitor security risks using data from security vendors, application vendors, government security organisations and other appropriate information sources and highlight areas of concern to the IT Security Manager * Monitor all security systems for potential security breaches and recommend remedial actions to be taken * Manage regular penetration tests (internal and external) Monitor the SIEM for issues arising Check compliance reports daily and get others to make appropriate updates Work with the Programme Manager on developing further compliance reports for regular review Verify Windows patches are applied by performing random checks Implement Nessus scanner with Cyber Essentials rules for internal systems to verify compliance levels Follow up on any phishing attacks or other security events to ensure proper process and documentation is followed Assist in putting together an Information Security Risk Assessment template and then conducting those for each of our systems. Follow up on penetration test results liaising with internal teams and external vendors to deliver required remediation Essential requirements: * Formal Information Security qualification (CISM, CISSP/CISA or equivalent) * At least 3 years of experience in Information Security Management or IT Audit related role * Understanding of ISO27001, Cyber Essentials, business continuity and compliance and audit frameworks * Understanding of IT infrastructure, networking systems and information management systems * Experienced in the selection and implementation of appropriate security controls * Ability to produce clear written material for Senior Management * Ability to communicate technical information in a clear and understandable manner to non-technical stakeholders * Ability to direct, interact and effectively share technical issues with IT staff and end users Desirable requirements: * Familiar with the configuration and operation of Nessus * Working within an ISO27001 or Cyber Essentials compliant environment * Strong understanding of GDPR and PCIDSS * Excellent analytical and problem-solving skills * Experience establishing an ISMS and SIEM Benefits: 28 days holiday 10% Co. Pension - no personal contrib needed Season Ticket Loan Cycle to Work Scheme Heavily subsidised Staff Canteen 36 Working Hour Week with a degree of flex Information Security Analyst - SIEM - Famous Arts Institution This is an amazing company to work for and they are looking for someone to start ASAP!