Information Security Officer

Derby City Council; East Midlands; Hybrid; GBP 52,000 - 55,000; Full time

Benefits offered by this job

Flexible work/life balance scheme

Hybrid working

Modern office environment

Continued professional development

Career conversations

Local Government Pension Scheme

Team Derby Rewards – discounts

Cycle2Work Scheme

Employee Assistance Programme

Equality networks

Support for carers

Job summary

Derby City Council is seeking an Information Security Officer to safeguard the council’s information, ensuring confidentiality and integrity. You will develop security policies, deliver engaging awareness training, conduct audits, and manage incident reporting with a focus on embedding best practices across the organisation.

You will work within the Information Governance team, contributing to a culture of strong information security and compliance through policy, training, and incident

Qualifications

• Knowledge of data protection regulation and information security standards.
• Experience delivering security awareness training to staff at different levels.
• Experience in managing information security risks and incident investigations.
• Experience conducting Privacy Impact Assessments.
• Ability to develop and maintain Information Security policies and procedures.
• Qualification in information security (e.g., CISSP or equivalent).

Responsibilities

• Develop and maintain Information Security policies and procedures.
• Develop engaging training to promote information security practices throughout the Council.
• Conduct regular Information Security audits and provide detailed insights.
• Recommend changes in policy and practice based on audit findings.
• Manage the Council’s information security incident reporting process.
• Ensure incidents are fully investigated and lessons are integrated into training and policy.

Skills

Information security principles

Legislation & regulation

Security awareness training

Incident management

Privacy Impact Assessments

Information security qualification

Education

Relevant information security qualification

Job description

Job description

Role: Information Security Officer
Salary: Grade L: £51,928 - £55,224 per year
Location: The Council House / Hybrid
Hours: 37
Contract Type: Permanent

Ensuring the security, confidentiality and integrity of the Councils information, is a critical legal and ethical responsibility. If you have a practical understanding of data protection regulation and a detailed knowledge of standards for information security, then we might have a great opportunity for you within our Information Governance team.

You will work closely with other security professionals within our team to cover the broad scope of corporate security assurance – physical, procedural and technical. You’ll develop training to raise awareness and highlight information security practices throughout the Council, with a mission to make information security an inherent part of our culture.

Who We Are

Here at Derby City Council, we’re dedicated to delivering nearly 250 first-class services to citizens and businesses in the heart of the Midlands. People are at the centre of all that we do, and we have an outstanding track record of recruiting and developing talented individuals by providing them with varied and fulfilling career opportunities.

What We Offer

You too could be part of something brilliant by becoming a colleague at Derby City Council; in addition to making a difference to the lives of people across the city, you’ll also receive:

• Flexible work/life balance scheme
• Hybrid working
• Modern office environment
• Continued professional development opportunities & career conversations
• 27 days annual leave (rising to 32 days after 5 years' service), plus bank holidays
• Local Government Pension Scheme
• Team Derby Rewards – retail and leisure discounts
• Tusker Car Benefit Scheme
• Cycle2Work Scheme & free cycle training
• Employee Assistance Programme, Wellbeing Calendar and Support
• Access to our Equality Employee Networks – LGBTQ+, Disabled Employee Network & Carers and our Black, Asian & Minority Ethnic Employee Support Network and Neurodiversity Network
• Support for colleagues who are carers

The Opportunity

In the role of Information Security Officer, here’s an example of what you’ll be doing to make an impact:

Your role is key to upholding the security, confidentiality and integrity of the Council’s information, you will do this by developing and maintaining Information Security policies and procedures, developing engaging training to highlight and promote information security practices throughout the Council.

You will conduct regular Information Security audits, providing detailed insight info data use, release, modification and destruction. Using your insight you will provide recommendations for changes in policy and practice.

You will also manage the Council’s Information security incident reporting process, ensuring that incidents are recognised, fully investigated and implementing any lessons learned into training and changes in policy and process.

About You

• Detailed knowledge and practical understanding of legislation, regulation, policies, procedures and standards for information management
• Practical knowledge of information security principles and best practice.
• Experience of successfully developing and delivering security awareness training to staff at different levels of an organization
• Experience in managing information security risks and investigating and reporting on incidents.
• Experience of conducting Privacy Impact Assessments
• A relevant information security qualification.