Cyber Security Compliance Officer

Venesky Brown; Cumbernauld; Hybrid; GBP 32,000 - 45,000; Full time

Job summary

Venesky-Brown’s client in Glasgow seeks a Cyber Security Compliance Officer on a 3-month contract. The role is hybrid and pays £28.06/hour PAYE. You will support the Digital Governance function, ensuring policy compliance with NIS and data protection requirements.

Essential experience includes ISMS maintenance, incident response, and strong information governance knowledge. Degree level education is required, with professional certifications encouraged.

Qualifications

• Degree level education or equivalent.
• SSCP or working towards it.
• CISP or working towards it.
• Experience maintaining an ISMS (Information Security Management System).
• Knowledge of Incident Response and Analysis.
• Experience with information/cyber security applications and risks.

Responsibilities

• Support the Head of Digital Governance on the implementation and maintenance of the Information Security Policy Framework, including NIS compliance.
• Advise on policies relating to Information Governance and security to safeguard personal data.
• Support investigations and response to information and cyber security incidents with internal and external partners.
• Contribute to policies reflecting legislative requirements for Information Governance and security.
• Monitor and regulate use of internet, email and cloud storage to ensure policy compliance.

Skills

SSCP

CISP

Information Governance

Communication

Teamwork

Education

Degree or equivalent

Tools

Microsoft Office

Microsoft 365

Job description

Venesky-Brown’s client, a public sector organisation in Glasgow, is currently looking to recruit a Cyber Security Compliance Officer for as soon as possible for an initial 3 month contract on a rate of £28.06/hour PAYE. This role will be hybrid working.

Responsibilities:

• Support the Head of Digital Governance on the implementation and maintenance of the Information Security Policy Framework, as an assessor for compliance with the Network and Information System Regulation (NIS) and assist in the maintenance of evidence submitted by departments for annual NIS audits conducted by the approved auditors.
• Advise and contribute to policies and procedures relating to Information Governance and security in safeguarding the confidentiality of personal data throughout the organisation.
• Support investigations and local response to Information and Cyber Security incidents which take place on computers, networks, information systems or contain data; liaising with Police Scotland, Counter Fraud Services, Central Legal Office, partner organisations and national intelligence agencies where appropriate.
• Develop and ensure effective implementation and understanding of Information Governance and ICT/eHealth policies e.g. Information Security Policy, e-mail acceptable use policy. Additionally, actively advise and contribute changes to policies of any other service areas to ensure they reflect legislative requirements in relation to Information Governance and security.
• Facilitate and influence changes to the working process and organisational culture within the organisation to meet Information Governance and cyber security objectives.
• To monitor and regulate the use of the internet, e-mail and cloud storage to ensure compliance and adherence with local polices and legislation and to make staff aware of policies regarding misuse of internet etc.
• Provide specialist advice, guidance and support to local service managers and accountable officers in their management roles, in all aspects of cyber and information security and associated legislation.
• Provide specialist advice in investigatory hearing that involves potential breaches in confidentiality, Computer Misuse Act, Data Protection Act 2018 and other information governance incidents.
• Conduct operational audits into all Security services and defence technologies, as well as others linked to partner organisations or suppliers e.g. cloud hosted information systems.
• Assist in the maintenance of the Incident Response Plan and Cyber Awareness Strategy as part of requirements of the Cyber Resilience Framework.
• Be a member of the Board’s Information Governance Group ensuring services have appropriate opportunities to participate and are kept fully informed of the organisation’s policies, protocols and guidance in relation to Information and Cyber Security.
• Assist in the design, scoping and review of cyber security testing of the organisation’s infrastructure, services and products e.g. penetration testing of networks by a third party.
• Carry out any other duties as required.

Essential Skills:

• Educated to degree level or equivalent
• System Security Certified Practitioner (SSCP) or evidence of working towards it
• Information Systems Security Professional qualification (CISP) or evidence of working towards it
• Evidence of relevant continued personal development
• Experience of maintaining an Information Security Management System (ISMS)
• Knowledge of Incident Response and Analysis
• Demonstrable experience of managing information/cyber security applications and risks in a related area either in service industries or commerce
• High level of knowledge in the use of Microsoft Office suite and Microsoft 365
• Advanced computer skills and proficiency in use of electronic system
• Good presentation, communication and interpersonal skills
• Experience of health service information systems
• Record of working successfully across professional boundaries
• Good team player
• Ability to work autonomously under own initiative
• Well organised and able to work under pressure delivering high quality outputs in constrained timescales