Public Sector | 22-8-2024

IT Security Officer

Location: Abbey Wood, Bristol – 3 days per week in the office – remaining 2 from home

Minimum Requirement:

• Good knowledge of ICT systems
• Knowledge of using event management software – SIEM tools etc
• Knowledge of assurance requirements from an ICT perspective
• Ability to use dashboards and navigate information within
• Leading and managing a SOC
• Defence/MOD background/experience would be desirable

Duties:

• Supporting the Team to deliver effective information assurance documentation and compliance with DD Accreditation (Secure by Design) and JSP604.
• Achieve and maintain compliance with JSP604 Rule 11
• Implement, coordinate, and manage the Security Operating Centre (SOC), conducting audits and monitoring activities as required
• Providing advice to the IT team to assist in the delivery of all IA activity relating to the Restricted and Secret networks
• Contributing to the development, maintenance, and review of the TSPT Information Baseline Control Set (BCS)
• Ensuring that specific implementation of any system, platform or infrastructure has been adequately secured and aligns with security architecture and advice where necessary
• Providing advice to stakeholders on the use and significance of Information Security/Assurance to influence project direction on security architecture, Data Protection and Cyber awareness
• Ensuring that Information Management activity is managed in accordance with regulatory and relevant legislation and that this is evidenced and maintained in a coherent and complete way through the TSPT portfolio of equipment registered in the Accreditation Evidence Set
• Coordinate, witness, manage and report on all security requirements for the project, ensuring they are completed professionally, efficiently and to schedule, and that they are fit for purpose and compliant with relevant policy and legislation
• Ensuring all appropriate actions are taken to achieve accreditation of TSPT Targets of Accreditation (ToAs)
• Ensuring that all cryptographic requirements are met
• Monitoring and reporting on project security requirements and issues as they arise, reporting unresolved issues to the IAO, Accreditor, Project Manager, and supplier (where necessary)
• Attending and reporting at Security Working Groups (SWGs) for the Tribune networks
• Assisting with the production of all security deliverables (e.g., security documentation, testing witness reports) and ensuring they are fit for purpose and delivered on schedule
• Creation, update, and management of Security Risk Registers
• Supporting the IT Operations Manager in delivering the Incident Response Plan and Business Continuity and Disaster Recovery activities
• Support the local Branch Security Officers where required to support IT security activities

Follow us on LinkedIn for new job listings, industry insights and career advice