Information Security and Assurance Advisor

Salary: £55,000 – 55,000 per year

Requirements

• We require applicants to have the unrestricted right to work in the UK.
• We require continuous UK residence for the last five years.
• We require eligibility to obtain enhanced security clearance.
• We require a full UK driving licence.
• We require willingness to travel regularly across the region as needed.
• We are looking for experience in several of the following areas: Information Security, Information Assurance, or Information Risk Management.
• We are looking for experience in security governance, risk and compliance activities.
• We are looking for experience in information security audits and assurance reviews.
• We are looking for experience in security incident management and investigation.
• We are looking for experience in data protection and privacy compliance.
• We are looking for experience developing and implementing security policies and procedures.
• We are looking for experience engaging stakeholders across technical and non-technical teams.
• We are looking for experience working in regulated or compliance-driven environments.
• We require knowledge of information security standards and frameworks such as ISO27001 and NIST.
• We require knowledge of UK GDPR and Data Protection legislation.
• We require knowledge of information risk management principles.
• We require knowledge of security governance and assurance practices.
• We require knowledge of confidentiality, integrity and availability principles.
• Relevant professional certifications such as CISSP, CISM, CRISC, Information Risk or Governance qualifications, or Data Protection qualifications are highly desirable.
• Equivalent experience will also be considered.

Responsibilities

• We identify, assess and manage information security risks across the organisation.
• We support compliance with national information security and assurance requirements.
• We provide expert advice on information security, governance and data protection matters.
• We develop, review and maintain information security policies, procedures and standards.
• We undertake information security audits, assurance reviews and compliance assessments.
• We support data protection compliance activities and privacy impact assessments.
• We investigate and manage information security incidents, ensuring lessons learned are captured and controls strengthened.
• We produce risk, assurance and compliance reporting for senior stakeholders.
• We assess supplier and third-party security arrangements and associated risks.
• We deliver security awareness guidance and support across the organisation.
• We contribute to the continual improvement of information assurance and security governance frameworks.

Technologies

• Support
• Security

We are a secure government organisation operating in the West Midlands with hybrid working and a permanent, full-time position offering a salary aligned with the range above. You will join our specialist Information Assurance team, working across a complex and highly regulated operational environment to help protect sensitive information and support the secure, lawful and effective use of information. This role gives you significant exposure to operational teams, technical specialists, suppliers and senior stakeholders, and offers the opportunity to make a meaningful impact within a security-focused public sector setting.

#J-18808-Ljbffr…