Cyber Security Compliance Officer

Venesky Brown; Glasgow; Hybrid; GBP 33,000 - 44,000; Full time

Job summary

Venesky Brown's client in Glasgow seeks a Cyber Security Compliance Officer on a 3‑month contract with hybrid working. The salary is £28.06/hour PAYE.

The role involves implementing the Information Security Policy Framework, ensuring NIS compliance, and guiding information governance across departments. Responsibilities include supporting audits, incident response, and policy development; monitoring internet/e-mail usage; advising on data protection and cyber security strategies; expected degree

Qualifications

• Educated to degree level or equivalent.
• System Security Certification Practitioner (SSCP) or working towards it.
• Information Systems Security Professional (CISP) or working towards it.
• Evidence of continued personal development.

Responsibilities

• Support the Head of Digital Governance on the implementation and maintenance of the Information Security Policy Framework.
• Assist in compliance with the Network and Information System Regulation (NIS) and audits.
• Advise on Information Governance and security policies to protect personal data.
• Support investigations and local response to information and cyber security incidents.
• Develop and implement information governance and ICT/eHealth policies reflecting legislative requirements.
• Monitor and regulate internet, e-mail and cloud storage usage for policy adherence.
• Provide specialist guidance to local service managers in cyber and information security.
• Advise on investigations involving confidentiality breaches and data protection acts.
• Conduct operational audits of security services and related technologies.
• Assist in Cyber Resilience planning and incident response strategies.
• Participate in design/review of cyber security testing and third-party assessments.

Skills

Degree level or equivalent

SSCP

CISP

ISMS experience

Incident response

Information governance

Microsoft 365

MS Office

Communication skills

Interpersonal skills

Autonomous working

Team player

Education

Bachelor degree or equivalent

Tools

SSCP/BC

Job description

Venesky-Brown’s client, a public sector organisation in Glasgow, is currently looking to recruit a Cyber Security Compliance Officer for as soon as possible for an initial 3 month contract on a rate of £28.06/hour PAYE. This role will be hybrid working.

Responsibilities

• Support the Head of Digital Governance on the implementation and maintenance of the Information Security Policy Framework, as an assessor for compliance with the Network and Information System Regulation (NIS) and assist in the maintenance of evidence submitted by departments for annual NIS audits conducted by the approved auditors.
• Advise and contribute to policies and procedures relating to Information Governance and security in safeguarding the confidentiality of personal data throughout the organisation.
• Support investigations and local response to Information and Cyber Security incidents which take place on computers, networks, information systems or contain data; liaising with Police Scotland, Counter Fraud Services, Central Legal Office, partner organisations and national intelligence agencies where appropriate.
• Develop and ensure effective implementation and understanding of Information Governance and ICT/eHealth policies e.g. Information Security Policy, e-mail acceptable use policy. Additionally, actively advise and contribute changes to policies of any other service areas to ensure they reflect legislative requirements in relation to Information Governance and security.
• Facilitate and influence changes to the working process and organisational culture within the organisation to meet Information Governance and cyber security objectives.
• To monitor and regulate the use of the internet, e-mail and cloud storage to ensure compliance and adherence with local polices and legislation and to make staff aware of policies regarding misuse of internet etc.
• Provide specialist advice, guidance and support to local service managers and accountable officers in their management roles, in all aspects of cyber and information security and associated legislation.
• Provide specialist advice in investigatory hearing that involves potential breaches in confidentiality, Computer Misuse Act, Data Protection Act 2018 and other information governance incidents.
• Conduct operational audits into all Security services and defence technologies, as well as others linked to partner organisations or suppliers e.g. cloud hosted information systems.
• Assist in the maintenance of the Incident Response Plan and Cyber Awareness Strategy as part of requirements of the Cyber Resilience Framework.Be a member of the Board’s Information Governance Group ensuring services have appropriate opportunities to participate and are kept fully informed of the organisation’s policies, protocols and guidance in relation to Information and Cyber Security.
• Assist in the design, scoping and review of cyber security testing of the organisation’s infrastructure, services and products e.g. penetration testing of networks by a third party.
• Carry out any other duties as required.

Essential Skills

• Educated to degree level or equivalent
• System Security Certified Practitioner (SSCP) or evidence of working towards it
• Information Systems Security Professional qualification (CISP) or evidence of working towards it
• Evidence of relevant continued personal development
• Experience of maintaining an Information Security Management System (ISMS)
• Knowledge of Incident Response and Analysis
• Demonstrable experience of managing information/cyber security applications and risks in a related area either in service industries or commerce
• High level of knowledge in the use of Microsoft Office suite and Microsoft 365
• Advanced computer skills and proficiency in use of electronic system
• Good presentation, communication and interpersonal skills
• Experience of health service information systems
• Record of working successfully across professional boundaries
• Good team player
• Ability to work autonomously under own initiative
• Well organised and able to work under pressure delivering high quality outputs in constrained timescales