Information Security & Compliance Lead - Hybrid

Derby City Council; East Midlands; Hybrid; GBP 52,000 - 55,000; Full time

Benefits offered by this job

Flexible work/life balance scheme

Hybrid working

Modern office environment

Continued professional development

Career conversations

Local Government Pension Scheme

Team Derby Rewards – discounts

Cycle2Work Scheme

Employee Assistance Programme

Equality networks

Support for carers

Job summary

Derby City Council is seeking an Information Security Officer to safeguard the council’s information, ensuring confidentiality and integrity. You will develop security policies, deliver engaging awareness training, conduct audits, and manage incident reporting with a focus on embedding best practices across the organisation.

You will work within the Information Governance team, contributing to a culture of strong information security and compliance through policy, training, and incident

Qualifications

• Knowledge of data protection regulation and information security standards.
• Experience delivering security awareness training to staff at different levels.
• Experience in managing information security risks and incident investigations.
• Experience conducting Privacy Impact Assessments.
• Ability to develop and maintain Information Security policies and procedures.
• Qualification in information security (e.g., CISSP or equivalent).

Responsibilities

• Develop and maintain Information Security policies and procedures.
• Develop engaging training to promote information security practices throughout the Council.
• Conduct regular Information Security audits and provide detailed insights.
• Recommend changes in policy and practice based on audit findings.
• Manage the Council’s information security incident reporting process.
• Ensure incidents are fully investigated and lessons are integrated into training and policy.

Skills

Information security principles

Legislation & regulation

Security awareness training

Incident management

Privacy Impact Assessments

Information security qualification

Education

Relevant information security qualification

Job description

Derby City Council is seeking an Information Security Officer to safeguard the council’s information, ensuring confidentiality and integrity. You will develop security policies, deliver engaging awareness training, conduct audits, and manage incident reporting with a focus on embedding best practices across the organisation.

You will work within the Information Governance team, contributing to a culture of strong information security and compliance through policy, training, and incident