Head of Cyber Security Culture and Architecture

Overview

This range is provided by Allen Lane. Your actual pay will be based on your skills and experience — talk with your recruiter to learn more.

Organisation: Foreign, Commonwealth and Development Office (FCDO)

Location: Hanslope Park (Milton Keynes) or East Kilbride - hybrid, minimum 60% in the office

Terms: Permanent, Grade 6

Benefits: 25 days annual leave, Civil Service pension scheme (28.97%)

The Head of Cyber Security Culture and Architecture is responsible to the Chief Information Security Officer to define, lead and deliver, through their team, the FCDO’s secure architecture and its internal cyber security culture. The role ensures that secure design is embedded across systems and services while fostering a workforce that understands, values and upholds security principles.

You will lead a team of security architects who will influence technology delivery, organisational behaviours and leadership decision making. You will ensure that architecture, awareness and cultural resilience are delivered in a coordinated way, aligning secure by design principles with secure behavioural outcomes.

The Head of Cyber Security Culture and Architecture will work in partnership with business, digital and security stakeholders, providing the leadership required to drive continuous development in the following areas:

• Information and Cyber Security Culture
• Information and Cyber Security Practices
• Information and Cyber Security Architecture
• Architectural Roadmap for Information Security

The Head of Cyber Security Culture and Architecture will be a member of the ICSD Senior Leadership team and IDD Extended Leadership Group; and is expected to lead engagement and reporting for their work streams, working across the IDD to improve ways of working both internally and externally. The successful candidate will be expected to represent the CISO at various HMG and external events where necessary.

Full details of the duties and responsibilities for this position are detailed in the candidate pack.

• Enterprise Security Architecture
  :
  Leading the design and assurance of enterprise security architecture, applying recognised frameworks and principles to ensure solutions are resilient, compliant and aligned with organisational objectives, while advising and guiding senior stakeholders.
• Technical Security Architecture
  :
  Applying security architectural principles to complex IT and operational technology (OT) systems, addressing vulnerabilities, bringing structure to diverse environments, while supervising practitioners and influencing senior stakeholders to adopt secure design.
• Policy and Standards
  :
  Providing subject matter expertise in developing and interpreting cyber and information security policies and standards to guide complex or precedent-setting decisions.
• Information Security Culture
  :
  Baselining the future vision for the FCDO’s information and cyber security culture, defining and assuring delivery of change levers and reporting mechanisms to effect cultural change.
• Third Party Management
  :
  Leading the definition and assurance of cyber and information security requirements for third-party relationships, advising senior stakeholders and ensuring suppliers deliver against compliance and risk management expectations.
• Management, Leadership and Influence
  :
  Embedding a security-first culture and influencing behaviours at all levels to reduce risk and improve resilience. Shaping Cyber and Information security leadership, strong stakeholder influence, and the management of high performing teams, while championing professional development.

Qualifications encouraged:
CISSP, CCSP, SABSA or CISM
.

The FCDO is a corporate member of CIISec and we actively encourage all staff to engage with its professional standards and work towards recognised accreditation to support ongoing development.

You will be required to complete and submit an application to  by the closing date of Monday November 3rd at 09:00
.

This must include a CV detailing your career history (including any relevant qualifications). CVs will be assessed against the Minimum Criteria outlined in the Person Specification section of this…