TwinStream

Security Engineer

• Manage information security incidents and security risks across the organisation
• Own and maintain the Information Security Management System (ISMS), including creating and updating policies, procedures, and guidance
• Ensure adherence to information security policies and standards
• Drive a programme of continuous information security improvement
• Embed and promote a positive security culture across the business
• Ensure compliance with relevant certifications and regulatory requirements, including ISO 27001, Cyber Essentials Plus, UK GDPR/Data Protection Act, and MOD CSM v3 and v4
• Plan and coordinate security audits (internal, external, customer, and penetration testing), managing evidence collection and tracking findings through to resolution
• Provide information security expertise to projects, services, and business initiatives, including developing or contributing to Security Management Plans
• Design and deliver information security training and awareness activities
• Contribute to Business Continuity, Disaster Recovery, and internal audit activities
• Act as the primary point of contact for information security across TwinStream

Information Security Manager