Head of Operational Information Security, Risk and Assurance

We are transforming DCMS to meet the demands of an agile, delivery-focused department leading on some of the highest priority work for the government’s agenda to drive growth, enrich lives and level-up society.

Our modernisation plans include critical investment in our systems, ensuring they are fit for purpose and reducing the manual input required, as well as the ongoing development of a new central function to transform the way DCMS uses technology, data and digital services.

We also want to transform how we solve policy challenges by having user centred design and collaboration within multi-disciplinary teams at the heart of what we do.

This is an incredibly exciting time to join the team within DCMS. Our mission is to digitally enable how DCMS delivers its priority outcomes which can adapt and respond to the changing needs of the sectors and partners we work with. Can you help us get there?

Role responsibilities:

• This is a leadership role that oversees three distinct technical teams
• Own and maintain the information security assessment process, supporting privacy and secure by design principles across operational projects and business-as-usual activity.
• Ensure the team maintain and implement information security procedures, guidance and self-help tools to support consistent compliance across the organisation.
• Ensure the team delivers training and practical support to improve understanding of data protection and information management compliance.
• Ensure that the team maintain accurate records and that monthly and annual reporting is produced for cyber risk, data protection and information management compliance activity.
• Lead and manage the team (three G7s directly and up to six staff indirectly), ensuring clear priorities, effective delivery, performance management and development support, and appropriate representation at relevant meetings.
• Clear Board and Executive Committee reports on data protection and information management compliance and present at Board level as required.
• Manage contracts and maintain relationships with suppliers to ensure good service quality and effective risk management