Information Security Consultant

Company Description

From the inception of a project through to completion and beyond, Turner & Townsend help to deliver the outcomes that matter through transformational programs covering the full spectrum of consultancy, project delivery and post-project operations. 

With offices located globally, you're never far away from our services. Working from 118 offices in 50 countries, we make the difference to projects across the real estate, infrastructure and natural resources sectors worldwide. 

Our team is dynamic, innovative and client-focused, supported by an inclusive and fun company culture. Our clients value our proactive approach, depth of expertise, integrity and the quality we deliver. As a result, our people get to enjoy working on some of the most exciting projects in the world. 

Job Description

Turner & Townsend is looking to recruit an in-office Information Security Manager to join our existing Global Information Security team.

Working with the Information Security team to provide advice and guidance on IT security and further develop IT policies and processes across a multi-region infrastructure consisting of 8300+ staff and 100+ sites.

As a member of the IT Security team, you will review all aspects of the IT environment and its components. This role shall be responsible for supporting and maintaining enterprise-wide solutions. The successful candidate will be required to proactively improve and provide advice and guidance on information security matters.

We believe this is an excellent opportunity for candidates who have a strong understanding of IT infrastructure and/or information security within a fast-paced environment.

SOX control responsibilities may be part of this role, which are to be adhered to where applicable.

Key Duties and Responsibilities

• Assist with security incident management and response activities.
• General day-to-day support on managing and responding to security alerts from systems and end-users.
• Perform daily, weekly, and monthly security checks, reconciliation and compliance checks and investigate exceptions.
• Completing client security requirement questionnaires and support the bidding process.
• Identify and raise awareness of security risks.
• Develop and enhance security policies, processes, procedures, and technical controls to strengthen Turner & Townsend’s security capabilities and resilience to cyber threats.
• Take a proactive role in identifying security risks, mitigations, and opportunities to strengthen Turner & Townsend’s resilience to cyber-attacks and security incidents.
• Participate in the design and implementation of systems and applications.
• Develop user and technical training guides.
• Maintain and manage the IT Risk register.
• Test DR plans and capabilities to ensure they work as designed, identifying gaps and lessons learn and work with the business to drive continual development and enhancement.

Qualifications

Technical Requirements:

• Five years hands-on experience of security and/or infrastructure within a large enterprise environment.
• Exposure to enterprise information security standards including Cyber Essentials, ISO 27001, 27002 etc. Data Protection Act and the General Data Protection Regulation.
• Microsoft O365 Security solutions; Networking; Security operations; Vulnerability Management; Security Auditing.
• Good understanding of security testing principles and laws, including experience of vulnerability scanning, identifying, resolving, and reporting risks.
• Experience of formal document creation, such as the creation of reports or procedures.

Detailed knowledge of:

• Microsoft O365 environment.
• Threat Intelligence analysis and best practice.
• Security Incident Response processes, procedures, and best practices.
• Disaster Recovery and Business Continuity principles.
• Global Security & Protection laws.
• Event and log analysis.

Core Behavioral Skills:

• Confident individual with the good interpersonal skills, able to deal with people at all levels and communicate to users in a clear, non-technical language.
• Team-player.
• Analytically minded, able to break down and understand information.
• Must be comfortable with working in a fast-moving, dynamic environment.
• Strongly customer-focused, used to providing support