Head of Operational Infrastructure Security
Location: UK - Hatfield, UK - London, UK - Milton Keynes | Job-ID: 202896 | Contract type: Standard | Business Unit: Inhouse IT
Life on the team
Our Group Information Services function is responsible for delivering, managing, and maintaining the systems that support Computacenter’s business. This includes our IT infrastructure (network, e-mail, file/print, internet) and our core applications.
Our mission is to be recognised as an approachable, flexible, and responsive division which understands our customers’ needs and is committed to delivering innovative, cost-effective services.
An exciting new opportunity is now available to help create and then lead a new "Operational Security" function. This brand-new position affords an opportunity to shape the direction of the vulnerability stance of the department.
You will work collaboratively with many different areas across GIS and closely with Computacenter's internal security department, to ensure vulnerabilities are well managed and efficiently remediated in any technology. Patching and version management of all technologies will also be led by this role.
We are keen to develop our own people this is a fantastic opportunity to make your own. You will be involved in so many business projects whilst working with passionate IT professionals.
If you are looking for a team that offers development and flexibility look no further and apply today.
What you’ll do
- Create and lead a new "Operational Security" team, focussed on vulnerability reduction and creating a strong security position for Computacenter.
- Ensure the Operational Security team deliver value to the department and drive high KPI achievement.
- Lead a small team of European based operational-focussed security professionals, giving direction, support, and development opportunities.
- Drive security initiatives across other operational teams.
- Lead an offshore team of specialists focussed on patching and the associated reporting and automation.
- Collaborate with Computacenter's internal security department to understand and agree vulnerability priorities and remediation approaches. Work closely with resolver teams to ensure full remediation is achieved.
- Manage internal exception processes and risk position.
- Work with senior leaders to ensure vulnerability management is highly prioritised and to create a culture of strong security throughout the department.
- Create, drive, and evolve processes around the management of cyber threats to Computacenter.
- Develop reporting approaches to deliver clear messages to senior management.
- Ensure patching across all technologies is carried out according to security policy. Continually ensure the patching tooling and approaches are effective and optimal.
- Deliver innovative automation approaches to improve security patching practices.
- Work with the architecture teams, to ensure technical best practices are delivered.
What you’ll need
- Security certification - such as CISM(P), SEC+, GIAC Security Essentials (GSEC)
- Proven experience in the field of IT security.
- Proven understanding of industry standard security frameworks - such as NIST Cybersecurity Framework, CIS security standards.
- Demonstrable understanding of industry security certifications - such as NCSC Cyber Essentials.
- Good understanding of security hardening approaches - such as CIS benchmarks.
- Good understanding of vulnerability scanning tools.
- Good understanding of penetration testing approaches.
- Demonstrable knowledge of patching tools such as SCCM.
- Excellent written and verbal communication skills.
- Comfortable working autonomously to deliver value.
- Proven experience leading teams.
About us
With over 20,000 employees across the globe, we work at the heart of digitisation, advising organisations on IT strategy, implementing the most appropriate technology, and helping our customers to source, transform and manage their technology infrastructure in over 70 countries. We deliver digital technology to some of the world’s greatest organisations, driving digital transformation, enabling people and their business.