The Senior Manager, Cyber Security Programme & Portfolio will be accountable for the success of the short-term (annual) programme; and for the 5-year plan that will be aligned to rolling Long-range Business Plan (LRBP) revisited annually.

A key responsibility of the job is to contribute to the definition of OPEX and CAPEX budgets that support the agreed portfolio, and to work closely with Finance to make sure that the expenditure profile stays within the budget forecast.

Key Responsibilities:

Managing the lifecycle of the Cyber Security Project Portfolio on behalf of the Global Security and Cyber Team:

Implementing high standards of Governance and Reporting for Portfolio Management within GS&C
Delivering Process improvements;
Developing and implementing governance and reporting controls
Developing and implementing improvement frameworks for GS&C
Developing metrics, KPIs and automating reporting capabilities

Leading and inspiring innovative opportunities to continually improve the Cyber Security Programme and Portfolio implementation process:

Aligning projects in the portfolio with the risks identified in the Information Security Risk Register;
Developing and implementing best practices and standards

Managing GS&C budget:

Supporting the short-term (annual) and long-term (LRBP) input process
Determine which activities will be prioritised using the MoSCoW method
Implementing financial tracking and reporting

Prepare, maintain and present Business Briefs and Business Cases
Ability to interact with senior stakeholders and secure support and approval for new activities to enter the project portfolio
Building strong relationships within the organisation to support and enhance a high performing collaborative approach to achieving departmental goals
Confidently and quickly undertaking special projects as required
Prioritising and delegating work as appropriate
Providing high-quality advice and well-considered recommendations backed up by accurate and perceptive analysis
Engaging with the external security community to maintain an understanding of threat environment and protective technology
Contributing to internal communication materials for the wider organisation
Engaging with stakeholders external to implement and drive positive change, supporting our clients' High-Performance Culture and Blue Chips

Essential Knowledge and Skills:

Demonstrable knowledge and previous work experience of Information Security Programme and Portfolio Management
Demonstrable knowledge of financial budgeting and accounting
Demonstrable knowledge and previous work experience of ISO 27000 family of standards.

Desirable Knowledge and skills:

Formal education or qualifications in Information Security preferred, e.g. MSc Information Security; CISM, CISSP Working knowledge of NIST SP.800-53
Working knowledge of NIST Framework for Improving Critical Infrastructure Cybersecurity
Experience in Risk Management / ISO 27005
Understanding of Crisis Management and Business Continuity
Knowledge of CERT Resilience Management Model

Senior Manager, Cyber Security Programm...