Information Security Lead - Bracknell, United Kingdom - Honda

Honda

Verified Company

Bracknell, United Kingdom

2 weeks ago

Posted by:

Tom O´Connor

beBee Recruiter

Description

Date:8 Aug 2023

Location:
Bracknell, GB

Company:
Honda Motor Europe Ltd

At Honda we embrace inclusion in our various policies, so whilst our contracts state that the hours are as required to fulfil the role with a minimum of 35 hours per week, we offer flexibility for when you work.

The regular office hours are 08:00 - 16:00 Monday to Thursday with a half hour lunch break & 08:00 - 13:00 on a Friday.

However, we offer flexibility of when you work with our daily flex-time start of between 07:00 and 11:00 providing that there is no business requirement.

Whilst there is no contractual right to work from home, the flexibility we offer is that you can request to work from home for a maximum of 50% of the working days in any one month, again providing there is no business requirement to attend the office.

Role
Honda is embracing digital technology to transform the way we do business across all of our product lines.

From online selling and connected vehicles to implementing the latest technology in our back-office operations, we need to ensure that business agility is supported by a robust security governance framework, protecting Honda's and our customers' information and data.

As a member of the regional IT security team you report to the Regional Security Services Manager.

You will be responsible to oversee and coordinate IT security operations across all locations in Europe, covering Honda's sales, logistics, manufacturing and R&D entities.

You will address identified IT security risks and issues, on an organisational and technical level. Propose changes to existing IT Security policies and procedures to ensure operating efficiency and compliance.

Perform risk assessments and compliancy checks against existing solutions and projects, ensuring Honda's IT security requirements are met.

You advise Honda IT staff and business users on complex IT security matters and support them during various project activities.

As part of Honda's global organisation, you closely work and coordinate with Honda Motor's (Japan) global security team on IT security governance and operation initiatives.

Main Responsibilities

Coordinate IT security operational activities with providers and IT staff.
Coordinate and perform threat and vulnerability management activities, identify risks, recommend treatment plans and communicate information.
Coordinate and perform security incident management activities, including detection, response and reporting.
Monitor and report on technical and operational IT security controls.
Recommend and implement security controls to meet security policies, legal, regulatory and audit requirements.
Report on compliance with security policies.
Propose changes to existing IT Security policies and procedures to ensure operating efficiency and compliance.
Provide expert guidance to projects on IT security matters.
Work with the IT Security Manager to develop a security roadmap that addresses identified risks and business security requirements.
Stay up to date with IT security related technologies and competences. Prepare and conduct security awareness and security training initiatives.

KPI's

High level of compliance with Information Security regulations, standards and internal policies.
Low number of Information Security incidents per severity.
Low average of response time on Information Security incidents per severity.
High accuracy of threat and vulnerability analysis.
Effective remediation plans and controls for identified vulnerabilities.

Qualifications, Skills and Experience
Required

Degree and / or significant experience in IT and IT security related matters, preferably in an international environment
Preferably holds an Information security professional certification such as CISMP
Good knowledge and understanding of Information security technologies such as:
Access control
Vulnerability management
Data loss prevention
Web Security
Antimalware controls
IDS/IPS
IT networks
System Administration
Excellent problem solving skills, capable of working under pressure on highly complex IT solutions.
Strong information security riskbased prioritisation capabilities
Good communication skills (able to explain complex technical concepts to both cyber professionals as well as business colleagues)

Desirable

Willing to travel occasionally within Europe.
Familiarity with applicable legal and regulatory requirements, including, but not limited to, the U.S. Sarbanes-Oxley Act, the U.S. Health Insurance Portability and Accountability Act (HIPAA), the European Union Privacy Directive, and the Japanese Financial Instruments and Exchange Law ("J-SOX").
An understanding of operating system internals and network protocols.
Project management skills and experience in creating and managing project plans, including budgeting and resource allocation.
Strong analytical skills to analyse security requirements and