Lead Cyber and IA Security Consultant

Roke; Gloucester; On-site; GBP 60,000 - 85,000; Full time

Job summary

Roke in Gloucester is seeking an Information Security Assurance Manager to join the on-site team at the client site. The role requires managing information security within the IRM framework, engaging with stakeholders, and ensuring policy adherence.

Candidates should hold DV clearance or transferable equivalent and be capable of producing clear, concise security documentation and risk assessments. This is a full-time, on-site position with no remote work.

Qualifications

• CISM or CISSP certification/experience required.
• Experience in Information Assurance roles.
• Excellent written and verbal communication skills.

Responsibilities

• Act as primary Security/IRM point of contact within the business area.
• Manage the Framework IRM Governance Model to ensure accountability and ownership.
• Engage with IRM Stakeholders and report on status of security risks, issues and actions.
• Provide IRM guidance to business teams, engineers and user communities regarding information security.

Skills

CISM/CISSP certification

Information Assurance experience

Strong written/verbal communication

Tools

Atlassian Suite

Job description

Information Security Assurance Manager

• Location: Gloucester & Customer Site 5 days per week no remote working
• Clearance: Candidates must hold a current transferable UKIC DV, a BPSS check will also need to be completed.

Scope of Work:

Working as part of an Information Assurance/Risk Management team, the IA Security Manager provides;

• Impartial IA advice directly to technical team members
• Information risk assessments for complex and/or non-standard systems, which show a clear technical and security understanding of risks and impact within the documentation created
• The ability to act as part of the liaison relationship between the client business team and key stakeholders in relation to IA and risk management issues
• Understanding and adoption of client security frameworks in the production of security documentation.

This role enables the business area to make effective risk decisions, at pace, and as such there is regular contact, both written and verbally, directly with the Authority. As such, strong written communication skills and experience of IA document production are essential to this role.

Responsibilities:

• Act as primary Security/IRM 'Point of Contact' within the business area, managing all information security
• aspects of the systems and services within the IRM framework.
• Manage the Framework IRM Governance Model to ensure the accountability, ownership and delegated
• assurance responsibilities are agreed, updated and maintained
• Ensure ongoing engagement with IRM Stakeholders, providing timely, concise information regarding status
• and progress of relevant Security risks, issues and actions, covering the complete lifecycle of a systemFacilitate and/or manage technical team IRM discussions, ensuring the risks & issues are captured and
• Action/Mitigation Plans agreed
• Co-ordinate, authorise, delegate and perform a range of 'Through Life' end-to-end lifecycle assurance
• requirements
• Provides appropriate IRM support, advice and guidance to the relevant business teams, engineers and user
• communities regarding all aspects of information security and IRM related matters
• Pro-actively assess, manage, maintain and challenge (if appropriate) business, and IRM/security related
• policies, processes, proposals and procedures
• Inform key stakeholders of new IRM and Security Policies, Standards, Guidelines and initiatives that may affect
• the business area, potentially impacting missions, operations, programmes and projects
• Ensure IRM documentation for complex and/or non-standard systems is both complete and accurate
• Ensure relevant IT Security Policies are followed and any exceptions have been accepted by the Risk Owner, on recommendation from the Accreditor
• Provide a comprehensive knowledge transfer on completion of individual tasking to an identified point of contact

Skills & Experience Required:

Required:

• CISM / CISSP or similar certification/experience
• Experience within an Information Assurance role(s)
• Strong written and verbal communication skills

Desirable:

• Awareness of the Authority's security frameworks (SPF)
• Experience using Atlassian suite tooling
• Awareness of Agile ways of working