Cybersecurity Compliance Lead - Public Sector (Hybrid)

Lancashire County Council; Preston; Hybrid; GBP 48,000 - 53,000; Full time

Benefits offered by this job

LGPS

26 days annual leave

Staff discounts (Vivup)

Career development

Job summary

Lancashire County Council's in-house Digital Services team is seeking a Cybersecurity Compliance Officer to strengthen cyber security and support modern digital services for residents across Lancashire. The role is permanent, full-time, 37 hours per week, Preston/Hybrid.

You will lead on vulnerability management, threat intelligence, and information security assurance; oversee the Information Assurance framework; and collaborate with ICT staff and partners to implement controls and meet evolving

Qualifications

• Experience delivering information security and assurance in a public sector or large organisation.
• Knowledge of MITRE ATT&CK, Cyber Kill Chain and intelligence lifecycle methodologies.
• Familiarity with standards such as ISO 27001, PCI, PSN and NCSC standards.

Responsibilities

• Drive security controls to address cyber threat changes and minimise risk.
• Provide professional advice on Information & Cyber Security to colleagues across Digital Services and the Council.
• Create and operate an Information Assurance framework to meet evolving business needs.
• Manage ICT staff and partners engaged in Information Security and Assurance activities.
• Attend conferences and training to maintain expertise in standards and best practice.

Skills

Cybersecurity

Vulnerability management

Risk assessment

Threat intelligence

Information security advice

Assurance methodologies

Job description

Lancashire County Council's in-house Digital Services team is seeking a Cybersecurity Compliance Officer to strengthen cyber security and support modern digital services for residents across Lancashire. The role is permanent, full-time, 37 hours per week, Preston/Hybrid.

You will lead on vulnerability management, threat intelligence, and information security assurance; oversee the Information Assurance framework; and collaborate with ICT staff and partners to implement controls and meet evolving