Average Information Technology salary in East London

Title:Information Security Architect Company:Financial Services Location:Can be based in UK, Ireland, Belgium, Luxembourg or Isle of Man Reports toGroup CISO Salary:£100,000 The Role The Information Security Architect is a key role in ensuring appropriate security posture of the Group. You will join a growing information security team and take accountability for managing security architecture of the company and technical designs of IT solutions. The Group of Companies operates across 10+ offices and data centre locations globally and is actively expanding into new territories. Responsibilities •Provide requirements, support and control security stage gates to IT and business programmes and projects to ensure security is appropriately addressed. Act as a Technical Design Authority for security. •Provide a high level of security consultancy and engineering support for Windows/Azure/Linux security solutions including analysis and development of security solutions. •Provide architecture assurance on security initiatives and compliance of existing security standards •Contribute to the vision, strategy, and drive design and implementation for security platforms both on premises and in the cloud •Provide security consultancy and engineering support for security solutions. •Present current security risks and threats at technical and managerial levels. •Actively monitor new and emerging security and privacy related technologies, trends, issues, and solutions and assess their applicability to key business initiatives and strategies. •Participate in Information Security Incident Response activities for the environment. •Monitor compliance with the organization's information security policies and procedures among employees, contractors and third parties. •Liaison with key stakeholders to create and enforce policy including business departments, IT, Legal, Internal Audit, and Compliance. •Lead the effort to ensure security compliance in accordance with regulatory security standards required by appropriate governing bodies. •Provide support to Security and other technical operations staff to ensure smooth turnover from Development to Production - and provide mentoring to junior level security professionals. •Develop and maintain documentation of all Security products including specific tools, technologies and processes. •Assist in M&A security due diligence activities - as needed. Role Requirements •Minimum of 3 years experience in similar role, 5 years experience in Information Security •Experience implementing security risk control management frameworks - i.e. CIS/SANS20, NIST CSF, ISO27001/27002 •Excellent understanding and experience of engineering Microsoft security solutions - including desktop and server operating systems, Active Directory, Group Policy, DNS, Messaging. •Experience managing IaaS, SaaS solutions and services using CI/CD pipelines. Jenkins, Terraform experience is a strong plus •Solid understanding of SAML, OIDC and Kerberos authentication and related technology controls and best practices. •Strong Experience with Office 365 security controls including usage of Azure Active Directory, Conditional Access, o365 logging APIs, Microsoft CAS, and Microsoft Authenticator. •Experience in Networks and Security monitoring, SIEM, Firewalls, Identity & Access management, Risk and Vulnerability Management, Incident management & response •Expertise in security tools such as email security solutions, web filtering, data leakage protection and intrusion detection systems; •Understanding and experience with implementing Data Loss Prevention (DLP) solutions, policies, and technologies. •Understanding of Azure Information Protection (AIP) and its components, including labelling, classification, and encryption. •Ability to develop and implement strategies to ensure compliance with industry and data protection regulations (such as BMA, MAS, EU financial sector regulations, DORA, GDPR). •Strong knowledge and experience in a variety of security technologies including: EDR, SIEM, Vulnerability Management. •Demonstratable and fundamental experience working within a cloud environment and cloud networks would be advantageous - e.g. Azure, AWS; •Ability to work independently and think proactively. •Good interpersonal, written and verbal communication and engagement skills with experience engaging own team, all levels of employees and external partners; •Must have excellent organisational skills with attention to detail; be a self-starter and able to prioritize in a fast moving, high pressure, constantly changing environment; high sense of urgency •Be energetic, passionate with a positive attitude •Relevant security certification (CISSP, GCIA, CISM, CRISC, CEH etc.) and/or product certifications (Microsoft Security, Azure, Windows, AD etc.) a plus.

We are looking for a highly skilled and motivated Information Security Analyst to join our team. In this role, you will play a crucial part in evaluating cybersecurity controls, conducting risk assessments, and collaborating with cross-functional teams. You will support our Information Security Manager in maintaining all aspects of information security risk management, responding to security inquiries and incidents, and ensuring compliance with relevant regulatory requirements. Key Responsibilities: * Support the delivery of the Information Security Management System and drive continuous improvement in information security. * Evaluate and assess cybersecurity controls across the business and third-party vendors to ensure compliance with the NIST Cyber Security Framework (CSF). * Conduct comprehensive risk assessments using the NIST CSF. * Identify cyber threats, risks, and issues using risk management techniques. * Develop and conduct third-party vendor security assurance activities. * Collaborate with cross-functional teams to develop and implement risk management activities. * Respond to security support tickets and provide information security support and escalation. * Create and collect metrics, validate security control performance, and identify emerging cyber risks. * Collaborate with the Enterprise Risk Management (ERM) team to maintain, develop, and deliver cyber risk reporting and appetite statements. * Maintain and develop Information Security policies and procedures relevant to the current cyber threat landscape. * Maintain, develop, and test the Cyber Incident Response Plan. * Monitor and manage compliance with relevant cybersecurity regulations. * Manage actions and output from stakeholder engagements, including customers, regulators, and auditors. * Stay current with emerging security trends, threat intelligence, industry standards, and security-enhancing technologies. Essential Skills, Knowledge & Experience: * Proven experience in an Information Security role. * Experience working in a professional or financial services environment. * Hands-on experience conducting cyber risk assessments and developing mitigation strategies. * Experience with cybersecurity control assessments and maintaining risk reporting and appetite statements. * Knowledge and experience with recognized security frameworks such as NIST CSF, ISO27001, etc. * Experience managing and maintaining cybersecurity compliance with regulatory frameworks such as FCA, PRA, NYDFS. * Experience developing a governance framework by maintaining policies and procedures. * Ability to meet agreed deadlines and work independently or collaboratively. * Knowledge of Microsoft systems (on-premise and Azure cloud), technologies, infrastructure, and systems management tools. * Ability to respond positively to exceptional events in information security. This is a fantastic opportunity to contribute to a company committed to continuous improvement in information security during a time of digital transformation and growth. If you are passionate about cybersecurity and meet the above criteria, we would love to hear from you.

Head of Information Security - Law Firm - City of London - Hybrid Working - 100-120k Robert Half have partnered with a with a fast-growing UK Based Law firm. Over the past few years, they've over doubled in size and now employ over 600 people winning many industry awards along the way providing a fresh, modern, tech-driven focus to the legal sector. The Role The post holder will be responsible for the Firm's Information Security function and related functions, reporting to the CIO and subject to oversight from the firms General Council and DPO. The post holder will be responsible for managing the Firm's ISO, Cyber Essentials, GDPR compliance programmes and managing an on-going information security risk assessment program, as well as initiating and managing information governance initiatives. Some of the responsibilities include: In conjunction with the CIO and the information security committee, develop and continuously improve the firm's information security strategy.Responsible for managing and maintaining certification as well as continuously improving the firms Integrated Management System (ISO 27001, ISO 22301, ISO 9001)Responsible for maintaining certification and continuously improving the firms Cyber Essential Plus programmeResponsible for the on-going compliance with the UK GDPR Regulation in conjunction with the firms Data Protection OfficersLine management responsibilities for the firms security analyst, including regular check-ins and annual appraisalsResponsible for developing and managing the firm business continuity and disaster recovery programmes in line with ISO 22301 in conjunction with appropriate committees and the firms General Counsel.Responsible for managing and delivering a successful internal IMS audit programmeResponsible for facilitating, managing and delivering successful external audits as requiredResponsible for managing the firms Information Security team and key information security suppliers.Responsible for managing and continuously improving the firms outsourced Security Operations CentreResponsible for chairing Information Security committee meetings and providing senior management with updates and advice as required.In conjunction with the Firm's General Counsel and CIO draft, review and update the firms Information Security policies and guidance notes.Responsible for security awareness training initiatives and communication plans to promote security awareness in the Firm. Skills & Experience Required: We would expect the successful candidate to have a minimum of 3-5 years' experience in a similar role in a professional services environmentExperience in the legal sector would be an advantageA further 3 - 5 years' experience in an Information Technology role, in a professional services environmentThe ability to grasp and apply complex new technologies quicklyA good understanding of the regulatory framework constituted by the Data Protection Act, the GDPR and the SRA Guidelines, and any other regulatory framework to which the Firm may be or become subjectAll round technical understanding of IT systemsA proven record of project deliveryCISSP or CISM certifiedAn ISO 27001 lead auditor accreditation would be an advantagesA Project Management certification (Prince2, etc) would be an advantage Hybrid Working, 2 days a week in brand new City of London Office £100 - 120k Base, Discretionary Bonus, Benefits Robert Half Ltd acts as an employment business for temporary positions and an employment agency for permanent positions. Robert Half is committed to equal opportunity and diversity. Suitable candidates with equivalent qualifications and more or less experience can apply. Rates of pay and salary ranges are dependent upon your experience, qualifications and training. If you wish to apply, please read our Privacy Notice describing how we may process, disclose and store your personal data: gb/en/privacy-notice Security alert: scammers are currently targeting jobseekers. Robert Half do not ask candidates for a fee or request candidates to send applications through instant messaging services such as WhatsApp or Telegram. Learn how to protect yourself by visiting our website: gb/en/how-spot-recruitment-scams-and-protect-yourself