Regional Information Security and Assurance Lead (RISAL) - London Probation Service

£37,238 – £44,520 per annum, plus a London allowance to be discussed at interview.

Full‑time, permanent role based in London, part of the London Probation Service. Reports to the Head of Corporate Services.

As Regional Information Security and Assurance Officer (RISAL) you will link the Probation Service region with HMPPS Information Security, manage line‑management of Project Officers, and lead the regional information security strategy.

Responsibilities, Activities & Duties

• Lead investigations into information security incidents and data breaches, report findings and recommendations to commissioning officers, provide evidence at hearings and coordinate recovery actions.
• Adapt and regionalise the national Information Security Policy Framework, ensuring implementation, embedding within local policy, and promoting a security culture across the region.
• Conduct routine compliance visits, maintain the Regional Risk Register, and manage emerging risks, ensuring actions are agreed with site leads and escalated to higher authorities.
• Compile and submit annual information security compliance statements and departmental health checks, addressing deficiencies with a robust improvement strategy.
• Provide technical guidance on information asset ownership, risk management and information sharing agreements (ISAs), and approve ISAs on behalf of the Regional Director.
• Chair the Regional Information Assurance Committee, attend the National Information Assurance forum, and disseminate information to regional leaders.
• Oversee the ISA database, perform quality assurance, and report on ISAs to senior leadership and HMPPS Information Security.
• Represent the region in stakeholder engagement with HMPPS, MoJ, government agencies and third‑party suppliers to ensure proper data sharing.
• Line‑manage Project Officers, including oversight, performance management, capability development and day‑to‑day supervision.
• Lead culture‑change initiatives, develop and deliver training, awareness sessions and bulletins on best practice, and foster an information‑management culture.
• Maintain an up‑to‑date knowledge of MoJ/HMPPS policies, UK GDPR, ICO guidance, and the National Cyber Security Centre (NCSC) role.
• Other duties may arise as part of the job and will be discussed with the holder.

Behaviours

• Delivering at Pace
• Communicating and Influencing
• Making Effective Decisions
• Working Together
• Leadership Ability

Experience

• Proficient in MS Office suite.
• Excellent verbal and written communication skills.
• Capability to deliver presentations to staff groups and individuals.
• Awareness and understanding of information management and security.
• Knowledge of General Data Protection Regulations (GDPR).
• Experience analysing and interpreting data, and writing reports.
• Experience presenting to staff groups and individuals.
• Experience working with internal and external stakeholders.

Technical Training (external)

• Records Management
• Information Assurance for Small and Medium enterprises (IASME) governance
• ISO 27001 internal auditor

Working Arrangements & Benefits

The role offers a hybrid working arrangement, blending office, MoJ sites and home as appropriate. Standard full‑time hours are 37 per week excluding unpaid breaks.

Benefits include:

• Annual leave: 25 days, increasing to 30 days after five years.
• Health and wellness support, pension through LGPS, training and development opportunities, and voluntary benefits.
• Paid maternity, paternity, adoption leave and other parental support.
• Employee networks and disability‑confident commitment.