Summary: The role of Senior Cyber Assurance Officer involves providing cyber security guidance and direction throughout a project, ensuring compliance with security standards and frameworks. The officer will create security briefs and assessments, facilitate vulnerability testing, and oversee remediation activities. Additionally, the position requires collaboration with various teams to ensure data protection and successful accreditation of solutions. This is a one-year fixed-term contract based in Glasgow, UK, with a hybrid working arrangement.
Key Responsibilities:
- Provide cyber security guidance and direction throughout the project.
- Create security briefs capturing formal guidance on security-related decisions.
- Develop applicable security assessments to measure compliance with security standards.
- Facilitate vulnerability and penetration testing to identify security threats.
- Oversee remediation activities identified from security assessments and testing.
- Attend and chair security meetings related to project deliverables.
- Collaborate with the Information Management team to implement data protection requirements.
- Work with the Force Information Security Management team for successful accreditation.
Key Skills:
- Experience in cyber security assurance and compliance.
- Strong understanding of security standards and frameworks.
- Ability to create security briefs and assessments.
- Experience in facilitating vulnerability and penetration testing.
- Strong communication and collaboration skills.
- Knowledge of data protection requirements.
- Experience in project management and security accreditation processes.
Salary (Rate): undetermined
City: Glasgow
Country: United Kingdom
Working Arrangements: hybrid
IR35 Status: undetermined
Seniority Level: undetermined
Industry: IT
Cyber Security Assurance - Senior
Glasgow, UK
1 year Fixed term contract
Hybrid ( 2-3 Days per week )
Role: Senior Cyber Assurance Officer
Responsibilities
- Responsible for providing cyber security guidance and direction throughout the project.
- Responsible for creation of security briefs, which capture and provide formal guidance on security related decisions throughout the project.
- Responsible for creation of applicable security assessments during the project, which will be used to measure compliance of solution against security standards and frameworks.
- Responsible for the facilitation of vulnerability and penetration testing, which will identify security threats and vulnerabilities.
- Responsible for the facilitation of the remediation activities that are identified from the security assessment and testing.
- Attend, and chair where necessary, security meetings and discussions relating to project deliverables.
- Work closely with the Information Management team to ensure all data protection requirements are implemented.
- Work closely with the Force Information Security Management team to ensure successful accreditation of the solution.
Deliverables / Outputs
- Security Assessment(s)
- Security Briefs
- Vulnerability Assessment and Penetration Testing
- Risk Treatment Plan
- Accreditation (signed-off by Force Information Security Manager)