InfoSec & Risk Assurance Leader

Department for Culture, Media and Sport; Manchester; On-site; GBP 55,000 - 75,000; Full time

Job summary

DCMS is seeking a senior leader to oversee three technical teams, driving secure and compliant delivery across priority government initiatives. You will own and maintain the information security assessment process, champion privacy by design, and provide practical support to ensure consistent cyber risk and data protection compliance across the organisation.

You will lead a team of three G7s directly (and up to six staff indirectly), craft clear Board and Executive Committee reports, manage

Responsibilities

• This is a leadership role that oversees three distinct technical teams.
• Own and maintain the information security assessment process, supporting privacy and secure by design principles across operational projects and business-as-usual activity.
• Ensure the team maintain and implement information security procedures, guidance and self-help tools to support consistent compliance across the organisation.
• Ensure the team delivers training and practical support to improve understanding of data protection and information management compliance.
• Ensure that the team maintain accurate records and that monthly and annual reporting is produced for cyber risk, data protection and information management compliance activity.
• Lead and manage the team (three G7s directly and up to six staff indirectly), ensuring clear priorities, effective delivery, performance management and development support, and appropriate representation at relevant meetings.
• Clear Board and Executive Committee reports on data protection and information management compliance and present at Board level as required.
• Manage contracts and maintain relationships with suppliers to ensure good service quality and effective risk management.

Job description

DCMS is seeking a senior leader to oversee three technical teams, driving secure and compliant delivery across priority government initiatives. You will own and maintain the information security assessment process, champion privacy by design, and provide practical support to ensure consistent cyber risk and data protection compliance across the organisation.

You will lead a team of three G7s directly (and up to six staff indirectly), craft clear Board and Executive Committee reports, manage