Disclosure Scotland - Cyber Security Analyst - C1 in Glasgow

This opportunity is only open to applicants who are currently 'Priority Movers'. Applications from individuals not currently on the Priority Mover list will be rejected and not considered.

Disclosure Scotland, an executive agency of the Scottish Government, is seeking a Principal Cyber Security Analyst. Disclosure Scotland supports safer recruitment and protects vulnerable groups. We look to continuously improve our services based on user needs. We are transforming the way the government provides this critical public service to safeguard children and vulnerable adults.

This role will see you in charge of a small team, ensuring that Disclosure Scotland's security strategy is delivered and the organisation is protected from cyber security threats. Cyber Security Analysts are responsible for protecting the confidentiality, integrity, and availability of information and information systems used by government and Partners Across Government.

• Initiate and influence relationships with and between key stakeholders, in taking forward all aspects of cyber security, acting as a primary point of contact for senior stakeholders and influencers.
• Manage the assessment and response to cyber threats to maintain confidentiality, integrity, availability, accountability and relevant compliance.
• Operate as a focus for cyber security expertise for the organisation and the wider central government community, providing authoritative advice and guidance on the application and operation of all types of cyber security controls.
• Oversee the work of the cyber security function, including project and task definition and prioritisation, quality management and budgetary control, and management tasks such as recruitment and training.

Responsibilities:

• Understand “voice of the customer” and develop mechanisms to proactively sense adoption and usage patterns of consumer technologies by end users so that policy can align with need.
• Deliver specific pieces of work resulting from the Cyber Security Strategy, related to cyber business risk and information control/protection requirements.
• Champion incident management, incident investigation and response policy and/or incident management and investigation processes, procedures and systems.
• Deliver comprehensive risk assessments for complicated or novel scenarios, using methodologies appropriate to the situation. Understand in detail how the risk assessment output dovetails into the risk management process.
• Have responsibility for penetration testing services and drive organisational and business change to better comply with policies, procedures and guidelines.
• Ensure effective delivery of penetration testing assessments for organisational benefit.
• Lead organisational teams in various stages of test design, execution, and assessment, for multiple customers, potentially across multiple organisations, and that comply with policies, procedures and guidelines.
• Develop cyber security policy, standards and guidelines appropriate to business, technology and legal requirements and in accordance with best professional and industry practice.

This role is a permanent level transfer position. This post is part of the Government Digital and Data (GDD) profession and currently attracts a £4000 annual GDD pay supplement, which is paid monthly. Pay supplements are temporary payments and subject to regular review. Following a review a pay supplement may change in value or be withdrawn.

Applications for this position will only be accepted from substantive C1 employees. Please submit a statement outlining your suitability for the role, relevant skills and experience, and what you would bring to the team (maximum 500 words). Vacancy closes at 11:59pm on Sunday 19th July.

All applications will be invited to an informal discussion with the hiring manager. Informal discussions are to be confirmed.

If you have specific questions about the role, please contact andrew.cunningham@gov.scot. Read our Candidate Guide for further information on our recruitment and application processes.