Information Security SME

Sword propels organisations on their data driven journey; where decisions are based on facts, metrics are used to motivate, data is openly shared, and trust and transparency are prioritised above all else.

Sword are IT Managed Services experts that provide access to specialist IT support, expertise and resources on demand. Our cost-effective digital solutions facilitate the delivery of clients’ commercial objectives. We rely on best practice and industry experience to enable business continuity, resilience and transformation for all our customers.

As the pre-eminent provider of Information Technology services to the Energy Sector in Aberdeen, we have an opportunity for an experienced Information Security SME.

About the role:

The Information Security SME will provide the information security solutions across a diverse range of complex IS projects for our E&P customer.

Role responsibilities:

• Act as an SME for Security function in support of ongoing integration activities,
• Responsible for supporting business to deliver secure and reliable IT services,
• Pro-active delivery of Enterprise based Information and Cyber Security solutions enabling the delivery of secure and reliable IT infrastructures,
• Working with Security Manager, Security Architect, Infrastructure Manager and Security Operations Lead in the protection of the Information services,
• Provide SME level security knowledge and design engineering that leads to the creation of high quality, secure by design, project deliveries. Examples of projects:
• Secure Internet Access
• Voice
• Privileged Remote Access
• VPN consolidation
• Information Management (Records Management & Data Governance)
• Infrastructure Road Mapping
• Security Email Gateway
• Identifying security related risk from projects and leading risk assessment processes,
• Identify divergences from best practice / security policy within projects and lead resolution processes,
• Liaison and engagement with third-party vendors to assess third-party risk.

Requirements

• IT/IS oil and gas experience,
• Experience in company divestments and integrations an advantage,
• Security Risk Assessment,
• Network Architecture Principles,
• Web and Email Security Technologies,
• Security Delivery within Azure and other Cloud Environments,
• Vulnerability Management and Security Logging and Monitoring Tools,
• Virtualisation and Containerisation,
• Edge Security Technology, IAM, PAM,
• Data Security and Governance,
• Ability to act proactively, escalating as required,
• Strong documentation and skills,
• Excellent problem-solving skills,
• Strong knowledge and experience of IT change management processes and principles,
• ITIL Foundation,
• Qualified in one or more of CISSP, CRISC, CCSP or equivalent experience.

Benefits

All members of the Sword team are supported and encouraged to develop their career with Sword through our personal training and development plan alongside a competitive salary, pension, and healthcare package.