Cyber Security Compliance Officer

Venesky Brown; Milton; Hybrid; GBP 52,000 - 58,000; Full time

Job summary

Venesky-Brown’s client, a public sector organisation in Glasgow, is recruiting a Cyber Security Compliance Officer on an initial 3-month contract at £28.06 per hour PAYE. The role is hybrid working.

You will support the Head of Digital Governance with the Information Security Policy Framework, assist with NIS audits, incident response, and governance of information security across departments.

Qualifications

• Degree or equivalent required and professional security training.
• Experience maintaining ISMS and incident response processes.
• Knowledge of policy, governance and information security standards.

Responsibilities

• Support the Head of Digital Governance with policy implementation.
• Assist with NIS audits and evidence submission for audits.
• Advise on Information Governance and security across the organisation.
• Support investigations and local response to security incidents.
• Contribute to cyber security policy reviews and changes.
• Monitor internet, email and cloud usage for policy compliance.
• Provide specialist guidance to service managers and officers.
• Assist in design and review of cyber security testing.

Skills

Incident response

ISMS experience

Microsoft 365 / Office 365

Presentation skills

Communication skills

Team player

Autonomous working

Organisational skills

Cross-functional collaboration

Policy advisory

Education

Degree level or equivalent

SSCP or towards it

CISSP or towards it (CISP)

Job description

Venesky-Brown’s client, a public sector organisation in Glasgow, is currently looking to recruit a Cyber Security Compliance Officer for as soon as possible for an initial 3 month contract on a rate of £28.06/hour PAYE. This role will be hybrid working.

Responsibilities:

• Support the Head of Digital Governance on the implementation and maintenance of the Information Security Policy Framework, as an assessor for compliance with the Network and Information System Regulation (NIS) and assist in the maintenance of evidence submitted by departments for annual NIS audits conducted by the approved auditors.
• Advise and contribute to policies and procedures relating to Information Governance and security in safeguarding the confidentiality of personal data throughout the organisation.
• Support investigations and local response to Information and Cyber Security incidents which take place on computers, networks, information systems or contain data; liaising with Police Scotland, Counter Fraud Services, Central Legal Office, partner organisations and national intelligence agencies where appropriate.
• Develop and ensure effective implementation and understanding of Information Governance and ICT/eHealth policies e.g. Information Security Policy, e-mail acceptable use policy. Additionally, actively advise and contribute changes to policies of any other service areas to ensure they reflect legislative requirements in relation to Information Governance and security.
• Facilitate and influence changes to the working process and organisational culture within the organisation to meet Information Governance and cyber security objectives.
• To monitor and regulate the use of the internet, e-mail and cloud storage to ensure compliance and adherence with local polices and legislation and to make staff aware of policies regarding misuse of internet etc.
• Provide specialist advice, guidance and support to local service managers and accountable officers in their management roles, in all aspects of cyber and information security and associated legislation.
• Provide specialist advice in investigatory hearing that involves potential breaches in confidentiality, Computer Misuse Act, Data Protection Act 2018 and other information governance incidents.
• Conduct operational audits into all Security services and defence technologies, as well as others linked to partner organisations or suppliers e.g. cloud hosted information systems.
• Assist in the maintenance of the Incident Response Plan and Cyber Awareness Strategy as part of requirements of the Cyber Resilience Framework.
• Be a member of the Board’s Information Governance Group ensuring services have appropriate opportunities to participate and are kept fully informed of the organisation’s policies, protocols and guidance in relation to Information and Cyber Security.
• Assist in the design, scoping and review of cyber security testing of the organisation’s infrastructure, services and products e.g. penetration testing of networks by a third party.
• Carry out any other duties as required.

Essential Skills:

• Educated to degree level or equivalent
• System Security Certified Practitioner (SSCP) or evidence of working towards it
• Information Systems Security Professional qualification (CISP) or evidence of working towards it
• Evidence of relevant continued personal development
• Experience of maintaining an Information Security Management System (ISMS)
• Knowledge of Incident Response and Analysis
• Demonstrable experience of managing information/cyber security applications and risks in a related area either in service industries or commerce
• High level of knowledge in the use of Microsoft Office suite and Microsoft 365
• Advanced computer skills and proficiency in use of electronic system
• Good presentation, communication and interpersonal skills
• Experience of health service information systems
• Record of working successfully across professional boundaries
• Good team player
• Ability to work autonomously under own initiative
• Well organised and able to work under pressure delivering high quality outputs in constrained timescales