Cyber Security Compliance Officer

Cyber Security Compliance Officer

Venesky-Brown’s client, a public sector organisation in Glasgow, is currently looking to recruit a Cyber Security Compliance Officer for as soon as possible for an initial 3 month contract on a rate of £28.06/hour PAYE. This role will be hybrid working.

Responsibilities

• Support the Head of Digital Governance on the implementation and maintenance of the Information Security Policy Framework, as an assessor for compliance with the Network and Information System Regulation (NIS) and assist in the maintenance of evidence submitted by departments for annual NIS audits conducted by the approved auditors.
• Advise and contribute to policies and procedures relating to Information Governance and security in safeguarding the confidentiality of personal data throughout the organisation.
• Support investigations and local response to Information and Cyber Security incidents which take place on computers, networks, information systems or contain data; liaising with Police Scotland, Counter Fraud Services, Central Legal Office, partner organisations and national intelligence agencies where appropriate.
• Develop and ensure effective implementation and understanding of Information Governance and ICT/eHealth policies e.g. Information Security Policy, e-mail acceptable use policy. Additionally, actively advise and contribute changes to policies of any other service areas to ensure they reflect legislative requirements in relation to Information Governance and security.
• Facilitate and influence changes to the working process and organisational culture within the organisation to meet Information Governance and cyber security objectives.
• To monitor and regulate the use of the internet, e-mail and cloud storage to ensure compliance and adherence with local policies and legislation and to make staff aware of policies regarding misuse of internet etc.
• Provide specialist advice, guidance and support to local service managers and accountable officers in their management roles, in all aspects of cyber and information security and associated legislation.
• Provide specialist advice in investigatory hearing that involves potential breaches in confidentiality, Computer Misuse Act, Data Protection Act 2018 and other information governance incidents.
• Conduct operational audits into all Security services and defence technologies, as well as others linked to partner organisations or suppliers e.g. cloud hosted information systems.
• Assist in the maintenance of the Incident Response Plan and Cyber Awareness Strategy as part of requirements of the Cyber Resilience Framework.
• Be a member of the Board’s Information Governance Group ensuring services have appropriate opportunities to participate and are kept fully informed of the organisation’s policies, protocols and guidance in relation to Information and Cyber Security.
• Assist in the design, scoping and review of cyber security testing of the organisation’s infrastructure, services and products e.g. penetration testing of networks by a third party.
• Carry out any other duties as required.