Interface Recruitment UK

Global major capital projects firm with operations across all sectors require an IT Security Specialist. Working with the IT Infrastructure team to provide advice and guidance on IT security and further develop IT policies and processes across a multi-region infrastructure consisting of 4000+ staff and 70+ sites. Education Requirements - NA Industry - Capital Infrastructure Projects Job Location - 2 Globe Road, Leeds Work Hours - 9 - 5.30pm Responsibilities As a member of the IT Infrastructure team, you will review all aspects of the IT environment and its components. This role shall be responsible for gathering requirements, designing and implementing enterprise-wide solutions. You will be required to proactively improve and provide advice and guidance on information security matters. This position also entails support and development of the company's IT policies and security solutions. Essential Skills: Comprehensive experience including in-depth knowledge, in a security or risk management role. An excellent understanding of enterprise information security and in-depth knowledge of standards including Cyber Essentials, ISO 27001, 27002 etc., Data Protection Act and the General Data Protection Regulation. Good understanding of security testing principles, including experience of penetration testing, identifying, resolving and reporting risks. Technical security experience with the following - Microsoft core OS; Networking; Security operations; Penetration testing/Security Auditing; Forensics; Security architecture. Technical expertise of Cisco security products, specifically ASA firewalls, AnyConnect, VPN and clientless portal. A good understanding of normal network infrastructure such as VPNs, firewalls, switches, routers, LANs etc. Experience of formal document creation, such as the creation of reports or procedures. Experience of carrying out risk reviews, technology audits or other similar work. Principal Duties, Responsibilities & Accountabilities: Maintaining and improving a Cyber Essentials Plus Security Standard. Co-ordinate, measure and report on the technical aspects of security management. Fully participate in internal governance activities relating to Information Security. Propose changes to existing policies and procedures to ensure operating efficiency and regulatory compliance. Identifying security non-conformities, patching or reconfiguring systems to resolve issues and building and testing new security technologies. Research and propose appropriate security solutions. Design, co-ordinate and manage security testing procedures to verify the security of systems, networks and applications, and manage the remediation of identified risks. Recommend and co-ordinate the implementation of technical controls to support and enforce defined security policies. Manage the process of gathering, analysing and assessing the current and future threat landscape, as well as providing the IT Director with a realistic overview of risks and threats in the enterprise environment. Monitor and report on compliance with security policies, as well as the enforcement of policies within the IT department. In addition, the role will include the opportunity to provide information security compliance consultancy to projects and operational teams to ensure that the design of new systems infrastructure or applications are and remain compliant with security policies and standards from inception to production delivery. Issues and exceptions processing and tracking. Technology Infrastructure Assessments for new, changed and existing systems in accordance with the information Security Policies Standards and Procedures. Work with the Infrastructure manager to develop a security program and security projects that address identified risks and business security requirements. Tracks issues and agreed actions to completion, escalating issues to the Head of IT. Definition and development of security control designs including those required to support external regulations. Provide security communication, awareness and training for audiences which may range from senior leaders to field staff. Work with various stakeholders to identify information asset owners to classify data and systems as part of a control framework implementation. Consult with IT and security staff to ensure that security is factored into the evaluation selection, installation and configuration of hardware, applications and software. Research, evaluate, design, test, recommend or plan the implementation of new or updated information security hardware or software and analyse its impact on the existing environment; provide technical and managerial expertise for the administration of security tools. Manage the day-to-day activities of threat and vulnerability management, identify risk tolerances, recommend treatment plans and communicate information about residual risk. Manage security projects and provide expert guidance on security matters for other IT projects. Ensure audit trails, system logs and other monitoring data sources are reviewed periodically and are in compliance with policies and audit requirements. Experience Requirements Skills Experienced information security risk and compliance function. Experience of technical vulnerability management processing and reporting. Ability to engage with projects and provide information security awareness and to raise compliance requirements within projects and operational teams. Proven track record as an information security analyst supporting global sites and regions. Qualifications Experienced Cisco Administrator (CCNA Security) Desirable.

What you will do: Provide first and second line support to the teams across our organisation using ITIL (IT Infrastructure Library) incident management methodologies in FreshService ITSM (IT Service Management) tool. Be the first point of contact for support tickets, triaging as appropriate, coordinating 3rd line problems with Developers, Business Analysts, and third parties to ensure issue are resolved or escalated in a timely fashion. Lead and provide support for our Azure infrastructure estate ensuring its performance and security exceeds our business defined Non-Functional Requirements. Be the organisations champion for Azure best practice, ensuring that continuous improvement of our Azure Estate is a fundamental part of the role. Support and assist the wider IT team in day-to-day operations, sharing knowledge and skills as required. Maintain our Windows desktop estate and onsite physical infrastructure including VPN (Virtual Private Network) configuration. Design and take ownership of monitoring tools including Azure Sentinel, incorporating our Azure BCDR (Business Continuity Disaster Recovery). Oversee system security including Azure RBAC (Role based access control), PIM (Privileged Identity Management) & PAM (Privileged Access Management), Microsoft 365 security investigations and mitigations and access reviews. Administer systems including Azure, Microsoft 365, ERP (Enterprise Resource Planning), CloudFlare and others ensuring appropriate backup and security is in place. Keep up to date on existing and emerging technologies. Act as Change Manager alongside the IT operations manager, ensuring the process is fit for purpose and adhered to by the IT team and wider organisation using digital services. Our values and behaviours Our values and behaviours set out how we work. Everyone is expected to behave in a respectful and inclusive way. Behaviours Leading the way Working as one team Being a business Focusing on people, including those with lived experience of social work and registered social workers Embracing change Respecting each other Values Providing a framework for work relationships and how we treat each other Providing a framework for customer service Providing a framework for achieving our vision and increasing the effectiveness of our organisation Creating an environment that promotes job satisfaction and emotional safety Microsoft and or Azure Fundamentals - but not essential

IT & Business Systems Officer ERP upgrade (Leeds) - REF 1132 Region: West Yorkshire Salary: up to £60k Holidays: 25 days plus bank holidays Pension: Pension Working day: Flexible working Office Location: M62 Corridor - West Yorkshire The IT & Business Systems Officer is responsible for managing IT activities and projects in alignment with the group IT strategy and policies. This role works as a business partner with the Group CIO and the local teams and oversees the IT resource and suppliers in the country. The IT & Business Systems Officer also ensures compliance with the regulations and standards of the medical devices market. The primary location is the Head Office in Leeds / Bradford, with some travel required both within the UK and occasionally internationally. Responsibilities: Manage the IT resource and suppliers in the country, ensuring quality, efficiency, and security of the IT services and solutions. Coordinate the IT projects and activities in the country, following the group IT recommendations and best practices. Work as a business partner with the group CIO and the local teams, understanding their needs and expectations, and providing IT support and guidance. Ensure compliance with the regulations and standards of the medical devices market, such as ISO 13485, FDA, and MDR. Monitor and report on the IT performance and budget in the country, identifying risks and opportunities for improvement. Skills / Qualifications / Experience Bachelor's degree in IT, computer science, engineering, or related field. At least 5 years of experience in IT management, preferably in the medical devices industry. Project management skills, with the ability to plan, execute, and deliver IT projects on time and within budget. Proficient in Microsoft environment, including Windows, Office, SharePoint, Teams, and Azure. Experience with ERP systems, such as SAP, Oracle, or Dynamics. Strong communication and interpersonal skills, with the ability to work effectively with different stakeholders and teams.