Hybrid Cybersecurity Compliance Manager

Lancashire County Council; Lancashire; Hybrid; GBP 46,000 - 51,000; Full time

Benefits offered by this job

Local Government Pension Scheme

26 days annual leave + holidays incl.

Staff discount Vivup

Career development opportunities

Job summary

Lancashire County Council is recruiting a Cybersecurity Compliance Officer to strengthen cyber security across its Digital Services team in Preston. The role focuses on enabling secure, compliant delivery of digital services and managing information security strategies for the Council and its communities.

You will work with vulnerability management, threat intelligence, and security frameworks (ISO 27001, PCI, PSN, NCSC) to ensure robust protection and governance across our systems and partners.

Qualifications

• Experience in information security and assurance, preferably in the public sector.
• Knowledge of cyber risk management and compliance frameworks.
• Ability to translate intelligence into actionable recommendations.
• Understanding of relevant standards and government security programs.

Responsibilities

• Drive security controls to address changing cyber threats.
• Provide professional advice on information & cyber security and assurance.
• Create and operate an information assurance framework to meet evolving needs.
• Lead ICT staff and partners engaged in information security activities.
• Attend conferences and training to maintain expertise in security standards.

Skills

Vulnerability management

Risk assessment

Intelligence platforms

Threat feeds

MITRE ATT&CK

Cyber Kill Chain

Information sharing

ISO 27001

Job description

Lancashire County Council is recruiting a Cybersecurity Compliance Officer to strengthen cyber security across its Digital Services team in Preston. The role focuses on enabling secure, compliant delivery of digital services and managing information security strategies for the Council and its communities.

You will work with vulnerability management, threat intelligence, and security frameworks (ISO 27001, PCI, PSN, NCSC) to ensure robust protection and governance across our systems and partners.