Lead Cyber and IA Security Consultant

• Location: Gloucester & Customer Site 5 days per week no remote working
• Clearance: Candidates must hold a current transferable UKIC DV, a BPSS check will also need to be completed.

Working as part of an Information Assurance/Risk Management team, the IA Security Manager provides;

• Impartial IA advice directly to technical team members
• Information risk assessments for complex and/or non-standard systems, which show a clear technical and security understanding of risks and impact within the documentation created
• The ability to act as part of the liaison relationship between the client business team and key stakeholders in relation to IA and risk management issues
• Understanding and adoption of client security frameworks in the production of security documentation.

This role enables the business area to make effective risk decisions, at pace, and as such there is regular contact, both written and verbally, directly with the Authority. As such, strong written communication skills and experience of IA document production are essential to this role.

• Act as primary Security/IRM 'Point of Contact' within the business area, managing all information security
• aspects of the systems and services within the IRM framework.
• Manage the Framework IRM Governance Model to ensure the accountability, ownership and delegated
• assurance responsibilities are agreed, updated and maintained
• Ensure ongoing engagement with IRM Stakeholders, providing timely, concise information regarding status
• and progress of relevant Security risks, issues and actions, covering the complete lifecycle of a system
  
  Facilitate and/or manage technical team IRM discussions, ensuring the risks & issues are captured and
• Action/Mitigation Plans agreed
• Co-ordinate, authorise, delegate and perform a range of 'Through Life' end-to-end lifecycle assurance
• requirements
• Provides appropriate IRM support, advice and guidance to the relevant business teams, engineers and user
• communities regarding all aspects of information security and IRM related matters
• Pro-actively assess, manage, maintain and challenge (if appropriate) business, and IRM/security related
• policies, processes, proposals and procedures
• Inform key stakeholders of new IRM and Security Policies, Standards, Guidelines and initiatives that may affect
• the business area, potentially impacting missions, operations, programmes and projects
• Ensure IRM documentation for complex and/or non-standard systems is both complete and accurate
• Ensure relevant IT Security Policies are followed and any exceptions have been accepted by the Risk Owner, on recommendation from the Accreditor
• Provide a comprehensive knowledge transfer on completion of individual tasking to an identified point of contact

• CISM / CISSP or similar certification/experience
• Experience with in an Information Assurance role(s)
• Strong written and verbal communication skills

• Awareness of the Authority's security frameworks (SPF)
• Experience using Atlassian suite tooling
• Awareness of Agile ways of working