Information Security Assurance Manager
- Location: Gloucester & Customer Site 5 days per week no remote working
- Clearance: Candidates must hold a current transferable UKIC DV, a BPSS check will also need to be completed.
Scope of Work:
Working as part of an Information Assurance/Risk Management team, the IA Security Manager provides;
- Impartial IA advice directly to technical team members
- Information risk assessments for complex and/or non-standard systems, which show a clear technical and security understanding of risks and impact within the documentation created
- The ability to act as part of the liaison relationship between the client business team and key stakeholders in relation to IA and risk management issues
- Understanding and adoption of client security frameworks in the production of security documentation.
This role enables the business area to make effective risk decisions, at pace, and as such there is regular contact, both written and verbally, directly with the Authority. As such, strong written communication skills and experience of IA document production are essential to this role.
Responsibilities:
- Act as primary Security/IRM 'Point of Contact' within the business area, managing all information security
- aspects of the systems and services within the IRM framework.
- Manage the Framework IRM Governance Model to ensure the accountability, ownership and delegated
- assurance responsibilities are agreed, updated and maintained
- Ensure ongoing engagement with IRM Stakeholders, providing timely, concise information regarding status
- and progress of relevant Security risks, issues and actions, covering the complete lifecycle of a systemFacilitate and/or manage technical team IRM discussions, ensuring the risks & issues are captured and
- Action/Mitigation Plans agreed
- Co-ordinate, authorise, delegate and perform a range of 'Through Life' end-to-end lifecycle assurance
- requirements
- Provides appropriate IRM support, advice and guidance to the relevant business teams, engineers and user
- communities regarding all aspects of information security and IRM related matters
- Pro-actively assess, manage, maintain and challenge (if appropriate) business, and IRM/security related
- policies, processes, proposals and procedures
- Inform key stakeholders of new IRM and Security Policies, Standards, Guidelines and initiatives that may affect
- the business area, potentially impacting missions, operations, programmes and projects
- Ensure IRM documentation for complex and/or non-standard systems is both complete and accurate
- Ensure relevant IT Security Policies are followed and any exceptions have been accepted by the Risk Owner, on recommendation from the Accreditor
- Provide a comprehensive knowledge transfer on completion of individual tasking to an identified point of contact
Skills & Experience Required:
Required:
- CISM / CISSP or similar certification/experience
- Experience within an Information Assurance role(s)
- Strong written and verbal communication skills
Desirable:
- Awareness of the Authority's security frameworks (SPF)
- Experience using Atlassian suite tooling
- Awareness of Agile ways of working
#J-18808-Ljbffr
Lead Cyber and IA Security Consultant in Gloucester employer: Roke
Roke is an exceptional employer, offering a dynamic work environment that fosters innovation and collaboration within the Defence sector. Employees benefit from a competitive salary, flexible perks focused on health and wellbeing, and a strong commitment to diversity and inclusion, all while contributing to meaningful projects that address national security challenges. With ample opportunities for professional growth and a supportive community, Roke is dedicated to empowering its team members to thrive in their careers.
