The Legal Aid Agency
Information Assurance and Security Officer - Legal Aid Agency (Ref: 23071)
Get notified of more jobs like this · No spam, ever
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Information Assurance and Security Officer - HEO
Job Summary
You will play a leading role in ensuring the Legal Aid Agency (LAA) continues to manage its information assets in a secure and compliant manner, delivering improvements and ensuring ongoing compliance with legal and UK Government requirements relating to security and data protection. You will work with Ministry of Justice (MoJ) colleagues providing guidance and support to teams across the LAA and on cross-government projects to ensure that information assets are protected and used appropriately and ensure that LAA senior leaders have the necessary assurance. You will work on developing and maintaining a strong security culture within the LAA, working with staff at all grades and across the organisation to ensure a security conscious agency, as well as playing a key role in responding to security incidents.
Key Responsibilities
- Provision of expert advice and support to stakeholders across the LAA on the application of Data Protection Legislation in their business area.
- Responding to often complex queries accurately in a timely manner.
- Provision of advice and support on data protection governance including Data Protection Impact Assessments, the LAA Information Asset Register, and Data Sharing Agreements.
- Investigation of security incidents, maintaining LAA incident records, and producing reports and trend analysis relating to LAA incidents.
- Working with business areas and stakeholders at all levels to drive process improvements with a view to improving compliance and/or preventing incidents.
- Responding to Data Subject Right’s requests, Data Protection Complaints, and other similar queries and correspondence from external parties.
- Support the work of LAA vetting contacts to ensure relevant staff are vetted to appropriate standards.
- Building and maintaining excellent relationships with key stakeholders across the LAA, wider MoJ, and other government departments.
- Attend cross-MoJ security working groups and other relevant networks.
- Lead and maintain the LAA Information Assurance Champions network, chairing regular meetings, disseminating resources, and guidance with a focus on driving down risk across the LAA.
- Support the LAA’s wider security awareness culture by reviewing new guidance from technical authorities, regulatory bodies, and government bodies.
- Review, publish, and update LAA guidance and intranet resources to inform staff of their security responsibilities.
- Develop and deliver training for a range of stakeholders and help facilitate and deliver bespoke training on a range of data protection and security topics.
- Contribute to LAA’s physical security assurance programme by conducting site audits and inspections and identifying improvements to physical security and site safety.
- Other work as required to contribute to the LAA’s security culture and reduce security and data protection risks.
- This role may include line management of up to two EO staff.
- Travel to LAA sites across England and Wales as required, including occasional overnight stays.
Essential Knowledge, Experience, and Skills
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
- Experience of working in either a data protection or information security role.
- Experience of applying data protection legislation and ICO guidance to organisational processes and scenarios.
- Experience of or ability to support incident management, including identifying, triaging, and responding to an incident, and briefing managers or senior leaders about incidents, their impact, and lessons learned.
Desirable Knowledge, Experience, and Skills
- Recognised qualification in Data Protection or Information Security.
Contract Type
Permanent
Salary Range
- National: £35,335 to £37,847
- London: £40,014 to £42,859
Please note that unless you are currently employed by the Civil Service and are earning more than the minimum above, if successful you will be offered the minimum for the grade depending on your location.
Location
Any LAA office
Please note that whilst this role is advertised externally, you can only apply for London, Cambridge, and Brighton offices if you are a current LAA staff member based in those offices. This is due to and in line with the LAA's Location Strategy and the Cabinet Office's Places for Growth Strategy.
Minimum Working Pattern
This role can be offered on a full-time or part-time basis. If you are applying for a part-time role, please note that to meet business demands we need cover for a minimum of 28 hours.
Application Process
To apply please submit a CV and Statement of Suitability showing how you meet the essential criteria in no more than 750 words.
Your statement should demonstrate your experience and your ability to do all of the three bullet points in the Essential Knowledge, Experience and skills listed above. Using examples can help strengthen your application.
Please note that we only require a CV and a Statement of Suitability for your application. The wording on this advert may suggest that an Experience question is also required, however, this is not necessary.
Interview/Assessment Process
If You Are Successful Through The Application Stage, You Will Be Invited To An Interview/Assessment Centre In Person Or Via Microsoft Teams Where You Will Be Assessed Against The Following:
Strengths Relevant to the Role
The Following Behaviours:
- Delivering at Pace
- Making Effective Decisions
- Working Together
An exercise assessing your ability to respond to a security incident. To complete the exercise, you will need access to a computer, email account, and software that can open Microsoft word documents. You will be required to share your screen and be on camera when completing the exercise. Further details of this will be shared at the interview.
Your Experience of implementing, promoting, or understanding diversity and inclusion policy - Diversity is the presence of difference, this can include one or more of the protected characteristics (Gender, Age, Race, Disability etc.) or it can be about working patterns, whether we like to jump into a task or reflect on it before acting. Inclusion is how we welcome, value, and celebrate diversity, giving everyone a voice, tapping into ideas, and enabling everyone to be themselves at work and achieve their potential.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
For this grade/role, we would expect the candidate to demonstrate understanding of the terms Diversity and Inclusion and be able to explain why they are important to them, their team, and to where they work. We would also expect examples of action they have taken (in or outside of work) to embrace diversity (e.g., increasing understanding) or improve inclusion at a team or group level.
Please note, if you progress to interview, you may be asked to provide evidence of the qualifications you’ve stated on your application.
Shortlisting
Shortlisting is planned for the week commencing 26th October 2026.
Interviews
Interviews are planned for the week commencing 16th November 2026.
If you would like more information on this opportunity, please contact:
- Adrian McArthur-Johnston - adrian.mcarthur-johnston@justice.gov.uk
Our LAA Commitment to Diversity and Inclusion
The Civil Service is committed to attract, retain, and invest in talent wherever it is found. To learn more, please see the [Civil Service People Plan](opens in a new window) and the [Civil Service Diversity and Inclusion Strategy](opens in a new window).
As a Disability Confident organisation, we will offer a guaranteed interview to candidates with a disability who meet the essential criteria for this role. Under the Equality Act 2010, a disability is defined as a physical or mental impairment which has a substantial and long-term adverse effect on your ability to carry out normal day-to-day activities which has lasted, or is expected to last, at least 12 months.
If you are responding to a role within the Legal Aid Agency and would like to be considered under the guaranteed interview, please indicate this in your application and let us know of any reasonable adjustments you may require during the sift or later selection processes.
The LAA’s goal is to build an organisation that is open and inclusive and truly values and celebrates the diversity of its workforce. One that reflects and understands the needs of the diverse society we serve. This is regardless of social background, gender, age, ethnicity, sexual orientation, beliefs, disabilities, or long-term illness or caring responsibilities.
Reasonable Adjustments
We are committed to ensuring our recruitment process is inclusive and accessible to all. If you have a disability or long-term condition (for example dyslexia, anxiety, autism, a mobility condition, or hearing loss) and need us to make any reasonable adjustments to support you through the recruitment process, please let us know by adding the information to the applications system or emailing LAARecruitment@justice.gov.uk after you have applied so that we can discuss options with you.
Complaints Procedure
If you have any complaints about this recruitment activity, please share your concerns by emailing LAARecruitment@justice.gov.uk initially. We aim to respond to any complaint within 10 working days.
If you are dissatisfied with our response, we will forward your complaint to the Civil Service Commission, an independent body, for review.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Location