Total 9 information technology job vacancies in Legal / Public / Security category in london n4 1sy

Protect and assure patient data and services against cyber security risk, while enabling secure delivery of new patient services and systems Provide leadership and guidance to the Trust on cyber security policy, risk and compliance issues Provide leadership and support to the Cyber Security Risk Manager and team Deputise for the Head of Information Security when required Develop and drive adoption of the Trusts cyber security strategy, policy, standards and procedures, including policy exception management, in alignment with Trust strategic objectives and with legal and NHS Digital requirements for cyber security and data protection Development of cyber security portfolio, including alignment with clinical and IT strategic objectives and initiatives Partner with business and IT leaders and key decision makers to ensure that appropriate cyber security controls are deployed and operated to time and budget Develop and ensure delivery of the Trust strategic cyber improvement programme, including engagement with NHS Digital and other key partners to drive improvements in cyber capability and maturity Shape commercially acceptable business cases and propositions for Cyber Security investment which balance cyber security risk control with accessibility, usability and cost considerations Lead for providing formal response to cyber security compliance elements of the NHS Digital Data Security & Protection Toolkit Develop and drive adoption of the Trust security risk and assurance framework Lead for embedding cyber risk and assurance controls within development lifecycle for Trust services and systems Provide direction and assurance for cyber security service development and operation, including assurance on cyber security services and systems provided by suppliers Lead the Trust response to major cyber incidents, and on preparatory work for major incidents, including cyber resilience planning and rehearsals Assess and report on cyber security risk posture and compliance through specification and collection of relevant cyber security metrics and KPIs Ensure that the Trust can meet the requirements of national cyber security standards and legislation, including the Data Security & Protection Toolkit, Cyber Essentials Plus, the Data Protection Act (2018) / GDPR and the Directive on the security of Network and Information Systems Monitor and audit Trust processes to identify gaps or weaknesses in current policy and practice, for manual and or electronic systems. Ensure all recommendations are implemented to deliver a continuous improvement in Trust service delivery Agree an annual audit programme with the Trusts Internal Audit department and external auditors. Ensure senior Trust engagement and support for cyber initiatives through regular briefings and reports to senior management boards and forums on cyber risk posture, action planning, and compliance with required standards Provide colleague education and awareness on cyber threat and how to safely respond to cyber incidents As a member of the Trusts senior cyber security team, ensure that cyber security considerations are effectively raised and addressed within appropriate IT and business management forums Set objectives for the Cyber Security Risk team, monitoring performance to assure delivery of the cyber security work programme Develop the skills and foster the career paths for cyber security professionals within the Cyber Risk team. Responsible for overseeing information security systems in place. Reporting on security systems in place and producing reports and audits for relevant governance forums.

Leadership Provide leadership and direction to the information security and business continuity service, including wider directorate and business teams Mentor and coach others, helping to develop our long-term capability including identify capability gaps and solutions Contribute to the development of long-term strategic plans for information security and business continuity, identifying risks and issues and developing mitigation strategies with clear outcome measures.Communicating between the technical and non-technical Identify the needs of business and technical stakeholders. Effectively manage stakeholder expectations. Demonstrate excellent communication skills and can manage difficult conversations or negotiations, including highly complex, sensitive and/or contentious information. Represent information security and business continuity on various internal and external groups.Data protection and freedom of information Support information gathering and creating supporting narrative / recommendations for complex data protection and freedom of information requests. Conduct information system searches and investigations that are highly complex / sensitive in nature, to meet data protection or freedom of information needs. Provide advice and expert knowledge to projects / programmes / operational services to ensure that information systems are designed to meet data protection requirements.Financial management Understand how to balance cost versus value. Consider the impact of user needs. Contribute and develop economic investment cases for information security including financial models for implementation, and running of servicesGovernance and assurance Evolve and define governance. Take responsibility for working with and supporting other staff in wider governance. Assure services across sets of services. Use tools such as standards, guardrails, and principles to effectively govern delivery.Information Security and Business Continuity Demonstrate in-depth knowledge of information security and business continuity, including analysing + testing Trust-wide capabilities and identifying improvement areas. Ensure that our security posture is maintained, monitored/measured and be responsible for leading interventions where standards are not met (example: security patching). Develop, maintain, and improve our data and technology Business Continuity & Disaster Recovery Plans, enabling us to respond to and recover from business continuity events ensuring we can provide a safe level of service to the public during the event, and ensuring we can manage the recovery process and incorporating learning. Lead vulnerability audits, security & penetration tests, forensic audits, or related investigations ensuring all findings are evaluated, and where appropriate, fed into continuous service improvement activities to continuously improve our security posture and resilience. Responsible for ensuring standards around information security and business continuity are embedded into service design. Provide subject matter expertise in major incidents, cyber security incident and/or events caused by or affecting information security. Act as the Problem Owner for highly complex, or sensitive information security matters (from identification through to resolution). Undertake Data Protection Impact Assessment (DPIA) and Information Security Assessment (ISA) activities, including supply chain / 3rd party assessments, aligned with projects / operational services. Maintain and improve the Information Security Assessment lifecycle, and Information Risk Management documentation for IT systems and data. Ensure that access to Trust systems is appropriately managed, regularly audited, and lead investigations as required. Provide expert advice on information transfer agreements with partner organisations in support of the Information Governance function. Partner with the Organisational Development and Information Governance teams and support the delivery of information security awareness and training.Making and informing risk-based decisions Make decisions characterised by managed levels of risk and complexity and recommend decisions as risk and complexity increase. Resolve disputes between wider peers and indirect stakeholders, considering all views and opinions.Policies, procedures, and processes Develop, maintain, and improve all directorate information security and business continuity policies & procedures, considering regional and national policies and practices, ensuring that both manual and electronic information across the Trust is included in-scope. Including, but not limited to DSPT, NIS, ISO / IEC series standards, cyber essentials, etc.Risk management Conduct information security risk assessments and control selection activities. Responsible for the management of information security and business continuity risks (for technology and data), including identifying new risks and ensure we are actively managing risk controls (for your portfolio that you are leading on).Service focus, monitoring, and reporting See the bigger picture and investigate how to get the best out of the underlying services to support the organisations strategic objectives and business priorities. Take complex reporting data from multiple sources, compare, and interpret against service baseline and industry standards and provide a supporting narrative. Responsible for service reporting for information security and business continuity, in-line with Trust-agreed reporting measures (example: security dashboard, security operations centre performance, etc). Ensure we comply with external reporting for information security and business continuity (example: NHS Cyber Alerts).Strategy Apply strategy, using and challenging patterns, standards, policies, roadmaps, and vision statements. You can provide guidance. Evaluate current information security and business continuity strategies to ensure business requirements are being met and exceeded where possible Responsible for managing and updating underpinning / enabling information security strategies that support the business objectives Ensure alignment of operating procedures and policies in-line with national, sector (ICS) and industry best practice where it makes sense to do so.Understanding the whole context Understand trends and practices outside your team and how these will impact your work. See how your work fits into the broader strategy and historical context. Consider the patterns and interactions on a larger scale.User focus Explain the difference between user needs and the desires of the user. Champion user research to focus on all users. Prioritise and define approaches to understand the user story, guiding others in doing so. Offer recommendations on the best tools and methods to use.Community of practice Develop and maintain a network of professionals to enable continuous learning and a community which can share, learn, and keep up to date on the information security and business continuity landscape, within the wider Digital, Data and Technology teams. Other Duties: Deputise for the Head of Information Security & Business Continuity as required. Occasional work may be required outside of core business hours to support major projects / programmes. All other reasonable requests

This role is part of our Information Security & Business Continuity team, responsible for:
• Ensuring the protection of the information in our organisation throughout the information lifecycle - that ensures the confidentiality, integrity, purpose, and availability of information, so that the organisation’s information is safeguarded from unauthorized access and misuse.
• Ensuring the availability of minimum services at a sufficient level for the business to sustain in the event of disasters.
• Horizon scanning across industry, identifying emerging trends and their potential impact and opportunity for the organisation.
The team has operational responsibility for security tooling and data (examples, but not limited to – anti-virus and intrusion prevention, security assurance platforms, security testing and monitoring platforms, etc) and for our managed services (security operations centre).
You will put people at the heart of everything you do – with a relentless focus on user experience and ensuring all our user needs are met across sites at Moorfields Eye Hospital NHS Foundation Trust.
With the ever-increasing need and interest in the use of digital technology in healthcare, you will be part of a team of Digital, Data and Technology experts that delivers service improvements and keeps at the forefront of new technology.

At this role level, you will:
• Responsible practitioner for multiple information security and business continuity services that are highly complex and high risk, ensuring performance and quality measures are aligned with business outcomes, and met.
• Define strategies and be central to assuring multiple services – improving the security and resilience of our organisational infrastructure.
• Regularly collaborate and find agreement with senior stakeholders, providing direction and challenge
• Be proactive in identifying problems and translating these into non-technical descriptions that can be widely understood.
In your role you will partner with other technology and data teams in the organisation. It is expected alongside specialist information security and business continuity skills and experience, you will have generalist or specialist experience in multiple domains:
• Cloud operations
• Data management
• Domain directory services
• Data storage and management
• Datacentre operations
• Device management
• Network security and operations
• Server architecture

At Moorfields, we provide more than just an excellent career and great colleagues to work with. We also offer:
• Salary including High-Cost Area Supplement
• Opportunity to join the NHS Pension Scheme
• Free 24/7 independent counselling service
• Learning and development opportunities
• Easy and quick transport links
• A range of attractive benefits and discounts
• Access to Blue Light Card and other NHS Discount Schemes
• Free Pilates classes
• Full support and training to develop your skills
• Flexible working friendly organisation
And so much more! To see the full range of benefits we offer please see our Moorfields benefits document.

Leadership
• Provide leadership and direction to the information security and business continuity service, including wider directorate and business teams
• Mentor and coach others, helping to develop our long-term capability including identify capability gaps and solutions
• Contribute to the development of long-term strategic plans for information security and business continuity, identifying risks and issues and developing mitigation strategies – with clear outcome measures.
Communicating between the technical and non-technical
• Identify the needs of business and technical stakeholders.
• Effectively manage stakeholder expectations.
• Demonstrate excellent communication skills and can manage difficult conversations or negotiations, including highly complex, sensitive and/or contentious information.
• Represent information security and business continuity on various internal and external groups.
Data protection and freedom of information
• Support information gathering and creating supporting narrative / recommendations for complex data protection and freedom of information requests.
• Conduct information system searches and investigations that are highly complex / sensitive in nature, to meet data protection or freedom of information needs.
• Provide advice and expert knowledge to projects / programmes / operational services to ensure that information systems are designed to meet data protection requirements.
Financial management
• Understand how to balance cost versus value.
• Consider the impact of user needs.
• Contribute and develop economic investment cases for information security – including financial models for implementation, and running of services
Governance and assurance
• Evolve and define governance.
• Take responsibility for working with and supporting other staff in wider governance.
• Assure services across sets of services.
• Use tools such as standards, guardrails, and principles to effectively govern delivery.
Information Security and Business Continuity
• Demonstrate in-depth knowledge of information security and business continuity, including analysing + testing Trust-wide capabilities and identifying improvement areas.
• Ensure that our security posture is maintained, monitored/measured and be responsible for leading interventions where standards are not met (example: security patching).
• Develop, maintain, and improve our data and technology Business Continuity & Disaster Recovery Plans, enabling us to respond to and recover from business continuity events – ensuring we can provide a safe level of service to the public during the event, and ensuring we can manage the recovery process and incorporating learning.
• Lead vulnerability audits, security & penetration tests, forensic audits, or related investigations – ensuring all findings are evaluated, and where appropriate, fed into continuous service improvement activities to continuously improve our security posture and resilience.
• Responsible for ensuring standards around information security and business continuity are embedded into service design.
• Provide subject matter expertise in major incidents, cyber security incident and/or events caused by or affecting information security.
• Act as the Problem Owner for highly complex, or sensitive information security matters (from identification through to resolution).
• Undertake Data Protection Impact Assessment (DPIA) and Information Security Assessment (ISA) activities, including supply chain / 3rd party assessments, aligned with projects / operational services.
• Maintain and improve the Information Security Assessment lifecycle, and Information Risk Management documentation for IT systems and data.
• Ensure that access to Trust systems is appropriately managed, regularly audited, and lead investigations as required.
• Provide expert advice on information transfer agreements with partner organisations in support of the Information Governance function.
• Partner with the Organisational Development and Information Governance teams and support the delivery of information security awareness and training.
Making and informing risk-based decisions
• Make decisions characterised by managed levels of risk and complexity and recommend decisions as risk and complexity increase.
• Resolve disputes between wider peers and indirect stakeholders, considering all views and opinions.
Policies, procedures, and processes
• Develop, maintain, and improve all directorate information security and business continuity policies & procedures, considering regional and national policies and practices, ensuring that both manual and electronic information across the Trust is included in-scope. Including, but not limited to – DSPT, NIS, ISO / IEC series standards, cyber essentials, etc.
Risk management
• Conduct information security risk assessments and control selection activities.
• Responsible for the management of information security and business continuity risks (for technology and data), including identifying new risks and ensure we are actively managing risk controls (for your portfolio that you are leading on).
Service focus, monitoring, and reporting
• See the bigger picture and investigate how to get the best out of the underlying services to support the organisations’ strategic objectives and business priorities.
• Take complex reporting data from multiple sources, compare, and interpret against service baseline and industry standards and provide a supporting narrative.
• Responsible for service reporting for information security and business continuity, in-line with Trust-agreed reporting measures (example: security dashboard, security operations centre performance, etc).
• Ensure we comply with external reporting for information security and business continuity (example: NHS Cyber Alerts).
Strategy
• Apply strategy, using and challenging patterns, standards, policies, roadmaps, and vision statements. You can provide guidance.
• Evaluate current information security and business continuity strategies to ensure business requirements are being met and exceeded where possible
• Responsible for managing and updating underpinning / enabling information security strategies that support the business objectives
• Ensure alignment of operating procedures and policies in-line with national, sector (ICS) and industry best practice – where it makes sense to do so.
Understanding the whole context
• Understand trends and practices outside your team and how these will impact your work.
• See how your work fits into the broader strategy and historical context.
• Consider the patterns and interactions on a larger scale.
User focus
• Explain the difference between user needs and the desires of the user.
• Champion user research to focus on all users.
• Prioritise and define approaches to understand the user story, guiding others in doing so.
• Offer recommendations on the best tools and methods to use.
Community of practice
• Develop and maintain a network of professionals to enable continuous learning and a community which can share, learn, and keep up to date on the information security and business continuity landscape, within the wider Digital, Data and Technology teams.
Other Duties:
• Deputise for the Head of Information Security & Business Continuity as required.
• Occasional work may be required outside of core business hours to support major projects / programmes.
• All other reasonable requests


This advert closes on Wednesday 13 Nov 2024

Information Security & Compliance Officer

£33K to £45K plus LWA of £6,707 to £8,164 (only applicable in London)

Onsite/Hybrid working - London or Glasgow based

Permanent opportunity

My client are a leading Charity organisation who is seeking an experienced Information Security and Compliance Officer to join their IT team. This critical role will be responsible for maintaining information security policies and controls, conducting security reviews, and ensuring the protection of all information security assets.

Key Responsibilities:

• Work closely with the Head of IT and Data Protection Officer to provide security guidance for IT and departmental projects.
• Design and implement security standards, policies, guidelines, and architectural principles to meet the organisation's cyber security goals.
• Develop and implement data loss prevention (DLP) policies, data retention, classification, and archiving processes.
• Support the Data Protection Officer with data breach incidents and subject access request tasks.
• Audit external platforms and ensure they meet the organisation's security standards.
• Be part of the Cyber Security Incident Response team and respond to security inquiries.
• Promote cyber security awareness through training and internal phishing campaigns.
• Perform security and user permissions audits, organise penetration testing, and ensure corrective actions are taken.
• Monitor core platforms, network infrastructure, and systems for unusual activity and insider threats.

Qualifications and Experience:

• Degree-level education.
• Certified in CISSP or CISM, or working towards certification.
• Strong understanding of IT networking, firewalls, protocols, and access management concepts.
• Broad knowledge of various IT systems, including cloud computing platforms (Microsoft 365 and Azure), with a deep understanding of associated security risks.
• Experience working with and deploying SIEM and CASB systems, intrusion detection/prevention, and Microsoft conditional access policies.
• Familiarity with information security principles and best practices (e.g., ISO27001, ISF Standards of Good Practice for Information Security).
• Understanding of and practical experience with GDPR, Freedom of Information Act, and related legislation.
• Ability to present security topics to non-technical audiences and communicate business and technical risks effectively.
• Self-motivated and proactive approach.

Morgan Hunt is a multi-award-winning recruitment business for interim, contract and temporary recruitment and acts as an Employment Agency in relation to permanent vacancies. Morgan Hunt is an equal opportunities employer. Job suitability is assessed on merit in accordance with the individual's skills, qualifications and abilities to perform the relevant duties required in a particular role.

Morgan Hunt are currently working with a Large National Charity in their search for an interim National Information Security Manager to oversee Information Governance & Security arrangements across the organisation.

You will act as a first point of contact for any information security enquiries, as well as ensuring the organisation maintains ISO27001:2013 accreditation.

This will involve coordinating external and conducting internal audits, managing a risk register, coordinating business continuity plans, updating the Information Security Manual, and any other tasks associated with this.

You will a transition to the new ISO27001:2022 standard as soon as possible, as well as coordinate Cyber Essentials certification renewals and Data Security Protection Toolkit submissions on an annual basis. You will also advise on, and support in, the drafting of information security policy documents, guidance, training, and other related documents.

The successful post-holder will have strong experience in an Information Governance/Information Security Manager position within the Public Sector, alongside recognised qualifications.

You will have a good understanding of the ISO27001 series of controls standards, knowledge of Data Security Protection Toolkit requirements and experience conducting audits.

You will have experience utilising quality management systems, strong analytical skills alongside excellent communication skills (written and verbal).

Job Title: National Information Security Manager

Location: Remote (Ad Hoc Travel to Offices)

Annual Salary: £52,500 - £57,000

Job Type: Fixed Term Contract (6 month, potential extension)

Hours: Full-Time (37.5 hours per week)

Key Responsibilities

• Manage re-certification of ISO27001 and Cyber Essentials accreditations, undertaking and coordinating tasks necessary for certification
• Coordinate annual submission of Data Security Protection Toolkit and associated manage tasks
• Alongside Legal Services colleagues, log, monitor and investigate data breaches
• Coordinate annual reviews of internal Data Protection and Information Security eLearning package
• Represent information security interests across a range of meetings, both internal and external (including attending regular Technology Department meetings, and organisational governance groups)
• Advise the organisation on information security impacts of new projects or process changes as well as supporting completion of data protection impact assessments
• Conduct and support internal audits on information security measures at Regional Business Units and operational services

Person Specification

• At least 2 years of full-time work experience in information security management and/or related functions (such as IT audit and IT Risk Management)
• A recognised Information security management qualification/s
• Experience in writing formal letters and reports as well as knowledge of general legal practices
• Good understanding of the ISO27001 series of controls standards
• Experience of governance and national connectivity programs as well as using quality management systems
• Experience of auditing, project development and project management
• Ability to analyse data, cross referencing with other data sources and intelligence in order to offer conclusions
• Experience in policy writing and stakeholder management skills
• Knowledge of the health, social care and third sector

Please contact to find out more information regarding this fantastic opportunity for a National Information Security manager.

Morgan Hunt is a multi-award-winning recruitment business for interim, contract and temporary recruitment and acts as an Employment Agency in relation to permanent vacancies. Morgan Hunt is an equal opportunities employer. Job suitability is assessed on merit in accordance with the individual's skills, qualifications and abilities to perform the relevant duties required in a particular role.

Report or escalate issues as appropriate to the Information and Cyber Security Manager. Produce reports for cyber security operations, including agreed service levels, KPI's and standards where applicable. Assess the effectiveness of Security Controls by conducting reviews, internal audits and spot-checks of ICT Security Infrastructure elements including: firewall, IDS/IPS, anti-malware, web and email filtering, MDM, SIEM, patch and vulnerability management. For a detailed job description and main responsibilities, please see the full Job Description and Person Specification.

As a member of the Infosec Engineering team, you will work on a wide variety of projects. The team is a project focused technical team, where you will get to work on projects that have impact across the whole organization. Being a small team you will have influence from day one and be able to drive the direction of Infosec technology at Man.

We work alongside the other tech teams on projects that will improve the security posture of the organization, and help and guide users and teams to make good security choices. We aim to provide systematic ways of defining polices and rules - for example by using common Infrastructure As Code tools to maintain configuration.

The team, and also the wider organization, value a passion for technology and see leading edge techniques as a part of keeping the business at the forefront of its field. The tech stack in Man Group is diverse, with Windows/Mac desktops/laptops, Linux (desktops and servers), HPC clusters, cloud technologies (on-prem and off), Docker and Kubernetes, and all manner of other technologies.

Some potential projects you will be able to work on are:

• Finding the most appropriate network segmentation and firewall rules, and building tools to roll these out
• zero trust networking implementation
• End user and corporate tool selection (E.g. Finding the most appropriate password manager, selecting deploying IGA/IAM solutions)
• Azure OIDC roll out
• Endpoint DLP solutions
• Building a framework for automated testing of policy rules, and developing tests to verify the state of our setup
• Probing our infrastructure to find weak spots  

What we expect

We’re looking for people who have a broad knowledge of infrastructure technologies. We have a large install of Linux, so a solid understanding of Linux and related technologies is key. Experience of networking technologies is beneficial. You will probably have worked as a Linux engineer (or a related low-level role), and maybe also have some Windows/Active Directory experience, and experience of using and running some cloud services. We are a small team, and we automate as much as possible, so an understanding of Python (or other programming language) is a must. Ideally some experience from configuration management tools (Ansible, Chef, Puppet, etc) and Infrastructure as code tools.

You should care about end users - this is very important to us, and we cannot afford for Infosec Engineering to be seen as a blocker to our users - we want to help users make correct choices and provide them tools for making those choices.

We prefer strong reasoning and ability to learn and grow over particular technologies or certifications. As we work closely with teams across the organization, strong communication skills and the ability to help set and keep priorities and manage time spent, is important.

Hopefully you will have a passion for learning new tools and techniques, for improving security, reliability, and user experience in systematic ways.

Bring your inspiration and new ideas - we love updating and improving our environment!

Work-Life Balance and Benefits at Man

Man Group is proud to provide the best working environment possible for all of its employees, and we are committed to equality of opportunity. At Man Group we believe that a diverse workforce is a critical factor in the success of our business, and this is embedded in our culture and values. We run a number of external and internal initiatives, partnerships and programmes that help us to attract and develop talent from diverse backgrounds and encourage diversity and inclusion across our firm and industry. https://www.man.com/diversity. Man Group is also a Signatory of the Women in Finance Charter.

Man Group supports many charities, and global initiatives. We support professional training and development, and requests for flexible or part-time working. Employees are also offered two 'Mankind' days of paid leave per year as part of the Man Charitable Trust's community volunteering programme.

We offer comprehensive, firm-wide employee benefits including competitive holiday entitlements, pension/401k, life and long-term disability coverage, group sick pay, enhanced parental leave and long-service leave.  Additional benefits are tailored to local markets and may include private medical coverage, discounted gym membership and wellbeing programmes.

The Opportunity

Our work couldn't be more important and is of enormous significance to the security of our nation's democracy. It enables the UK Parliament to run smoothly and transparently, and when you join us in this vital role, you'll be a key member of the Information Security Directorate which enables Parliament to improve the management of its information security through assessment, monitoring and the mitigation of risks and issues.

We'll expect you to keep up-to-date with information rights legislation, and work with the Head of Information Security Risk in developing Parliament's risk management maturity, as well as assuring that identified information risks are being managed within agreed risk appetite. You'll also work with information risk owner for PDS to identify and prioritise departmental information risks: This will include standard Parliamentary assurance, the specific local compliance needs, identifying, and responding to, opportunities for improved information management.

What You Need

With a curious and enquiring mind, and the ability to identify opportunities and areas of improvement, you'll be ready to work with stakeholders to propose improvements and use data to drive change and improve our security risk position.

You should also have:

• experience of risk management
• the skills to support, motivate and share best practice
• highly effective communication and listening skills
• the skills to work collaboratively with a wide variety of stakeholders
• the ability to use well developed influencing, negotiation, and facilitation skills to respond to challenging situations
• the ability to pass security clearance, backed by the right to work in the UK

About The Team

You'll be joining a small, growing team that is committed to improving information security, mitigating a wide range of risks and maintaining security standards of the highest quality. It's pro-active and flexible, and dedicated to building a brand-new culture that will make a real difference to the way our organisation functions. You will play a key part in shaping the team and our service offering. Working alongside a wide variety of stakeholders as it builds information security across Parliament, this is an innovative team with a broad outlook and ambitious strategy. We're dedicated to building our Workplace Equality Network, and with a major focus on Diversity, Equality and Inclusion, all PDS's teams are committed to making Parliament a great place for everyone to work

About Us

UK Parliament is steeped in history and tradition. It is an important part of UK life and we need to ensure as many people as possible can engage with its work. This is why we are at the start of a huge transformation programme powered by technology. The Parliamentary Digital Service (PDS) works with the House of Commons and the House of Lords with all their IT and digital needs. We are here to realise the digital ambitions of a modern Parliament and welcome you to join us in building a digital democracy.

Our Package

Please refer to our Candidate Information Pack for a full list of our benefits which include:

• up to 35 days annual leave in addition to bank holidays
• generous maternity pay policy up to 6 months full pay
• great pension scheme options (contributory and non-contributory)
• on-site subsidised gym, nursery, catering, post office, travel office and GP
• flexible options including hybrid working and family friendly policies

How To Apply

Please make sure you're clear on the requirements of the role. These can be found in the Job Description and Candidate Information Pack. You will need to upload a CV and show how you meet criterion 1, 2, and 3. Our application process is anonymous, so please remove any personal information from your CV.

Apply By:

Interviews: 11th December 2023

Format: Presentation + Panel Interview (Remote)

Our Culture

For our people, we provide an amazing opportunity to bring their talents to an institution that sits right at the heart of society in the UK. We are helping to change UK Parliament and strengthen democracy. What matters here is your potential for growth and your commitment to playing your part in our ongoing success.

We are passionate about providing an environment which promotes inclusion, diversity and equality. Regardless of your age, gender, ethnicity, beliefs or any of the other things that make you, you. We welcome applications from people who feel under-represented in the workforce. This includes those who may feel disadvantaged because of their socioeconomic circumstances.

Our mission is to support a thriving parliamentary democracy - this means being ready to carry out our essential functions to support colleagues deliver excellent services on the Parliamentary Estate and remotely. The balance of location varies according to the requirements of each job role, including some roles which can only be carried out from the Parliamentary Estate. The usual working arrangements for teams in the Digital Service are set out in team hybrid working plans and are by agreement with the managers and leaders of those teams. All teams are required to attend the estate for part of the time to meet business requirements and for team communication, learning and training. Please refer to the hybrid working plan contained in the candidate pack for more information

The Opportunity

Our work couldn't be more important and is of enormous significance to the security of our nation's democracy. It is work that enables the UK Parliament to run smoothly, function efficiently and operate transparently, and when you join us in this exciting and unique position, you'll be ready to hit the ground running as you learn new skills, develop your expertise and increase your knowledge. This is a role you can make your own, and through which you'll be able to build an exciting career with an ambitious and innovative team.

Working with the Head of Information Security Risk, it'll be your job to keep information security policies and procedures under review, and ensure new and evolving solutions have the appropriate information security accreditation. But your vital work won't stop there. Among your other tasks we'll also expect you to:

• work across Parliament to ensure assurance activities are incorporated into the programme delivery schedules
• act as a project lead for Information Security in providing advice to the business on information security matters and assurance processes
• identify, record and manage information security risks across Parliament, liaising with relevant stakeholders and escalating any issues
• manage the outcome of the accreditation by maintaining a record of any risks, and ensure any remediation actions are performed quickly and efficiently
• support the development and maintenance of assurance policies and procedures, and ensure these are aligned with other information compliance requirements
• develop, implement and evaluate opportunities to increase staff awareness of information assurance processes

What You Need

You need to be ambitious, creative and willing to learn. Although this role would be ideal for someone who wants to build their career, we'll expect you to have some skills already in place. So if you possess experience of taking a lead role in information security with a large organisation, and addressing complex challenges and managing any associated risks, then we want to hear from you. You should also have:

• experience of applying sound professional judgment in making decisions based on analysing relevant facts from complex data
• the ability to build excellent working relationships with people, and the skills to influence and persuade a wide range of stakeholders
• the ability to engage positively in discussions while taking account of other peoples' views, and the confidence to challenge and negotiate when you have to
• superb communication skills including the ability to explain complex issues to stakeholders in a way that is understandable and meaningful
• the ability to convey important messages and key decisions accurately, and ensure they are understood and acted upon
• highly effective organisational skills with the ability to identify and adapt to changing priorities
• the ability to work under pressure to tight deadlines and deliver to agreed targets
• the skills to compile and deliver briefings and targeted guidance to different audiences
• experience of working in a team and the ability to supervise, motivate and lead people to high professional standards while promoting a culture of diversity and inclusion
• the ability to pass security clearance, backed by the right to work in the UK

About The Team

You'll be joining a small, growing team that is committed to improving information security, mitigating a wide range of risks and maintaining security standards of the highest quality. It's pro-active and flexible, and dedicated to building a brand-new culture that will make a real difference to the way our organisation functions. You will play a key part in shaping the team and our service offering. Working alongside a wide variety of stakeholders as it builds information security across Parliament, this is an innovative team with a broad outlook and ambitious strategy. We're dedicated to building our Workplace Equality Network, and with a major focus on Diversity, Equality and Inclusion, all PDS's teams are committed to making Parliament a great place for everyone to work.

About Us

UK Parliament is steeped in history and tradition. It is an important part of UK life and we need to ensure as many people as possible can engage with its work. This is why we are at the start of a huge transformation programme powered by technology. The Parliamentary Digital Service (PDS) works with the House of Commons and the House of Lords with all their IT and digital needs. We are here to realise the digital ambitions of a modern Parliament and welcome you to join us in building a digital democracy.

Our Package

Please refer to our Candidate Information Pack for a full list of our benefits which include:

• up to 35 days annual leave in addition to bank holidays
• generous maternity pay policy up to 6 months full pay
• great pension scheme options (contributory and non-contributory)
• on-site subsidised gym, nursery, catering, post office, travel office and GP
• flexible options including hybrid working and family friendly policies

How To Apply

Please make sure you're clear on the requirements of the role. These can be found in the Job Description and Candidate Information Pack. You will need to upload a CV and show how you meet criterions 1, 2, and 3. Our application process is anonymous, so please remove any personal information from your CV.

Apply By:

Interviews: TBC

Format: Presentation + Panel Interview (Remote)

Our Culture

For our people, we provide an amazing opportunity to bring their talents to an institution that sits right at the heart of society in the UK. We are helping to change UK Parliament and strengthen democracy. What matters here is your potential for growth and your commitment to playing your part in our ongoing success.

We are passionate about providing an environment which promotes inclusion, diversity and equality. Regardless of your age, gender, ethnicity, beliefs or any of the other things that make you, you. We welcome applications from people who feel under-represented in the workforce. This includes those who may feel disadvantaged because of their socioeconomic circumstances.

Our mission is to support a thriving parliamentary democracy - this means being ready to carry out our essential functions to support colleagues deliver excellent services on the Parliamentary Estate and remotely. The balance of location varies according to the requirements of each job role, including some roles which can only be carried out from the Parliamentary Estate. The usual working arrangements for teams in the Digital Service are set out in team hybrid working plans and are by agreement with the managers and leaders of those teams. All teams are required to attend the estate for part of the time to meet business requirements and for team communication, learning and training. Please refer to the hybrid working plan contained in the candidate pack for more information