Cyber Security Adviser
You’ll provide advice and guidance on Secure by Design (SbD), ensuring Head Office business units are compliant with MOD policy and lead on the implementation of Cyber Compliance Framework activities, driving forward improvements as required.
Liaising with the Head Office System Owners, the Directorate of Cyber Governance, Risk and Compliance, Defence Digital and other key stakeholders, you’ll ensure we are coherent with wider Departmental work / objectives. You'll represent the Cyber Team at departmental meetings, which may include attending the Cyber Resilience Oversight Board.
You may also be required to support the Principal Security Adviser and Security and Resilience Ops Lead to manage cyber security and resilience incidents. This may include managing crises that disrupt, or have the potential to disrupt, business in Main Building.
Responsibilities include:
The Cyber Security Adviser will work closely with Cyber Security lead to perform following responsibilities.
Support Head Office (HO) IT systems and system owners in preparation for Cyber Compliance framework (CCF) audits based on NCSC and NIST framework to ensure security practices are compliant and overseeing any remedial activity.Support HO governance structures to manage all cyber security risks and maintain up to date cyber risk register.
Act as cyber security support consultant and Security Assurance Coordinator (SAC) with respect to any new IT projects, ensuring that Secure by Design (SbD) is embedded in system design and configuration from the outset.
Provide assurance support to Head Office, Defence Digital and Cyber Defence & Risk by supporting risk assessments and cyber vulnerability assessments with system owners and Defence Digital.
Liaise relevant Cyber and Security Incident teams to support and response to Head Office cyber security incidents.
Arrange meeting with HO’s System Owners as required and maintain cyber meeting minutes note.
Monitor Daily cyber security communications group mailbox to maintain constant awareness.
(Remote working within this role is something that can be discussed at interview stages or with your future line manager if you are found successful.)