Cyber Security Officer - B3
Description
This opportunity is only open to applicants who are Scottish Government employees, and are currently 'Priority Movers'. Applications from individuals not currently on the Priority Mover list will be rejected and not considered.
This is an exciting role within Education Scotland where you will be instrumental in helping to drive forward the implementation of an ambitious Information and Cyber Security programme. Working with the Lead Cyber Security Officer, the Technical Delivery Team and Digital Services, amongst others, you will help ensure the confidentiality, integrity and availability of corporate digital systems, including Glow, the national Digital Learning platform for schools which has over one million provisioned users.
You will also help to support the design and implementation of cyber security controls and measures for transformative projects within Education Scotland. This is a high impact role which offers the successful candidate the opportunity of making a strong and significant impact to the benefit hundreds of thousands of learners and teachers across Scotland.
Responsibilities
This post will include, but not be limited to the following duties:
- Leading the provision of advice and guidance on security strategies to manage identified risks and ensure adoption and adherence to standards
- Leading penetration testing, security risk assessments and business impact analysis on information systems
- Interpret information assurance and security policies and applies these in order to manage risks
- Provide advice and guidance to ensure adoption of and adherence to information assurance architectures, strategies, policies, standards and guidelines
- Threat Identification and Risk Management
- Security Project Design, Procurement and Implementation
- Third Party Oversight- Development, delivery and monitoring compliance of Security Awareness campaigns
- Providing consultancy on projects
- Development of Information Security policies, procedures and guidelines and managing compliance
- Supporting and developing the Information Security Management system- Incident Response
- Leading and mentoring junior members of security staff
Technical/Professional Skills
- Information risk assessment and risk management
- Applied security capability
- Protective security
- Threat understanding
You can find out more about the technical skills required for this role on the UK Government security profession career framework
Experience
- Knowledge of Information Security standards such as ISO/IEC 27001, NIST CSF and NCSC CAF with a proven ability to interpret and apply these standards in organisational contexts.
- Understanding of the internal and external information security risks and administrative, physical and technical controls to mitigate against these risks effectively.
- Demonstrable experience in providing information security advice and leadership in the planning, execution, and management of Information Security
projects, ensuring alignment with organisational goals and industry best practices.
- Knowledge of current legislation, regulations, and standards relevant to information security and privacy, including but not limited to the Data Protection Act 2018 (DPA 2018) and the General Data Protection Regulation (GDPR), with the ability to interpret legal requirements and integrate compliance measures into operational frameworks.
Working pattern
This role is a permanent level transfer position.
How to Apply
Applications for this position will only be accepted from substantive B3 employees.
Please submit a CV and a statement outlining your suitability for the role, relevant skills and experience, and what you would bring to the team (maximum 500 words).
Vacancy closes at 11:59pm
Selection Process
All applications will be invited to an informal discussion with the hiring manager.
Informal discussions are to be confirmed.
Further Information
If you have specific questions about the role, please contact murray.elliot@educationscotland.gov.scot
Pay supplement
This post is part of the Government Digital and Data (GDD) profession and currently attracts a £4000 annual GDD pay supplement, which is paid monthly. Pay supplements are temporary payments and subject to regular review. Following a review a pay supplement may change in value or be withdrawn.