Information Security Compliance & Risk Specialist

Government Recruitment Service; Southampton; On-site; GBP 40,000 - 55,000; Full time

Job summary

A government agency in Southampton is looking for an Information Security Compliance and Risk Specialist to develop and maintain the Information Security Management System (ISMS). The role involves delivering risk management processes, managing compliance reviews, and implementing training plans. Candidates should have a background in information security and risk management. This position offers a unique opportunity to contribute to national safety standards.

Qualifications

• Experience in developing and maintaining Information Security Management Systems.
• Proven track record in information security risk management.
• Experience in compliance audits within the public sector.

Responsibilities

• Develop & maintain the MCA’s ISMS and documentation.
• Deliver information security risk management processes.
• Coordinate annual compliance reviews and audits.
• Manage the security training and awareness plan.

Skills

Risk management

Stakeholder engagement

Information security policies

Audit management

Training delivery

Job description

Information Security is the practice of assuring the security, confidentiality, integrity and availability of all MCA assets (information, technology, people, systems, equipment) throughout the MCA and its suppliers.

This role is part of the Compliance & Risk team, within Information Security, providing internal assurance services around Government Security Standard compliance, the MCAs Information Security Management System (ISMS) compliance and Information Security threat and risk management processes for all asset types, in line with strategic objectives.

The Maritime and Coastguard Agency (MCA) implement the government’s maritime safety policy in the United Kingdom and works to prevent the loss of life and occurrence of pollution on the coast and at sea.

Safer lives. Safer Ships. Cleaner Seas.

Our vision is to be a world-leading organisation, accelerating the transition to sustainable shipping with non-negotiable safety standards. We put our people, our customers and our planet at the heart of everything we do.

We are committed to giving all our colleagues purpose, professionalism and pride in what we do. We work in supportive, diverse and inclusive teams.

We want everyone to feel valued and supported to achieve their potential at MCA.

This culture of inclusion is underpinned by our staff networks groups covering, Women’s, LGBTQI+, Race, Carers, Mental Wellbeing and volunteer Respect Ambassadors.

The Information Security Compliance and Risk Specialist will:

• Develop & maintain the MCA’s Information Security Management System (ISMS) and all underpinning documentation, including stakeholder engagement & compliance checks.
• Be responsible for the delivery of information security risk management processes, across all asset types, providing risk-based advice & guidance to asset owners across the business and carrying out regular reviews of the MCA’s risk/threat landscape.
• Be the coordinator for annual compliance reviews and audits, managing the implementation of remediation action.
• Managing the development & delivery of the security training and awareness plan for the business.

For further information about the role and responsibilities, please see the attached role profile.