Job Description

Cyber Security Officer

What is the key purpose of this role?

Job Purpose

To support the Senior Information Risk Owner (SIRO), Chief Information Security Officer (CISO), Security Manager (Cyber) and the Security and Resilience team in delivering the organisation’s cyber security and information assurance strategy. To provide guidance to the business as a whole on; cyber security, information management and assurance.

What do I need to excel in this role?

Candidates for this role should be able to demonstrate the following:

Qualifications

• Good first degree (or SQL Level 5 equivalent) qualification and/or at least 3 years’ experience in a security/nuclear related environment
• Internal Auditor
• Certificate in Information Security Principles (CISMP)
• Certified Information Systems Security Professional (CISSP)
• Completed NSAN Triple Bar
• Member of a Professional Affiliation (e.g. UK’s Security Institute)
• Any other technical cybersecurity related qualifications

Experience

• Working to HMG policy, Security Assessment Principles (SyAPs) and government bodies such as NCSC and CPNI
• Collaborative working with internal and external stakeholders, such as risk assessment working groups, project committee and senior management
• Understanding of the nuclear industry and the hierarchal structure
• Familiarity with information assurance and technical frameworks
• Writing processes, work instructions and guidelines
• Experience of working within a regulated business environment

Knowledge

• Information security concepts
• Risk identification, assessment, mitigation and management of risk
• Strong knowledge of compliance and other related CS&IA frameworks
• Knowledge and understanding of information, cyber, physical and personnel security principles
• Knowledge and understanding of security processes and systems
•  Knowledge and understanding of Civil Nuclear industry and its regulators and key stakeholders
•  Sound understanding of NTS key business processes
• Knowledge of the nuclear transport industry

What are the key deliverables and accountabilities of the role?

Key accountabilities

Key Expectations of the Job Holder

• Contribute to the development of complex and innovative cybersecurity risk management plans under the guidance of the CISO.
• Act as a key point of contact to provide cyber security and information assurance solutions and advice to all parts of the business as required.
• Support (and lead where appropriate) the delivery of CSRP projects and milestones, NDA group cyber targets and NTS corporate CS&IA targets
• Lead and conduct internal and external CS&IA audits in collaboration with internal stakeholders to ensure that cybersecurity controls are functioning as intended and implement changes based on risk
• Lead where appropriate and support a team conducting compliance monitoring and/or technical controls testing, reporting findings to the CISO; escalating issues as appropriate.
• Support the development, revision or implementation of Information and Cybersecurity Governance processes, incorporating recent advances in Cybersecurity into existing policies and standards
• Develop, maintain, and deliver an NTS cybersecurity technical programme, including technical benchmarking and good practice guidance, aligned to the chosen Cybersecurity framework, maintaining currency in regulatory requirements.
• Support (and lead where appropriate) the receipt, recording and effective response to cyber threat intelligence and associated vulnerabilities ensuring that all internal/external stakeholders are informed
• Develop and maintain excellent working relationships with our stakeholders including NDA (Cyber Security & Resilience Programme), ONR, NCSC and third party suppliers and customers. Including the attendance at industry forums.
• Support implementation of corporate/management decisions & initiatives
• Manage own workload, including time and deadline management, performance, self–development, health and well-being

What are the benefits of working at NTS?

We encourage applications from a diverse range of candidates.

We are proud of the commitment we make to diversity and inclusion and of the progress we have made. We have active & vibrant staff networks, special leave policies and workplace adjustments put in place for those who need them. We are continuing to build a diverse organisation, in an inclusive environment which nurtures and realises potential in all, at all levels.

Diversity and inclusion is our top priority, and we embrace uniqueness. We strongly encourage applicants from diverse backgrounds and experiences. We are a welcoming and inclusive workplace where our people are able to bring their whole selves to work.

All applicants from the NDA Group of companies may be eligible for protection of certain elements of their T&Cs when voluntarily taking up employment with another NDA Group Company.  If successful in your application, your existing Group Employer’s HR team will collaborate with the new Group Employer’s HR team to ensure that the appropriate protections are implemented into your contract offer.  For further details, please contact a member of your current HR team.

How to Apply

Job Categories: Equal Opportunities. Job Types: Full-Time. Salaries: 40,000 - 60,000.

86 total views, 0 today

Apply for this Job