Chief Information Security Officer

Freedom to take actions as the lead specialist, based on own interpretation of security policy, to conduct complex investigations into suspected or actual breaches of security and provide formal written reports advising how legislation and or policy should be interpreted directly to the relevant Senior Information Risk Owner or identified person for the organisation affected. These cases could lead to disciplinary action being taken against staff Liaise with senior managers of stakeholder organisations, NHS cyber security teams, the Counter Fraud Service, the Police and external organisations, as required, when investigating incidents. Monitoring and managing all IT security breaches taking remedial action to prevent recurrence, reporting, analysing and reducing the impact and volumes of all security inciden Investigations into abuse of IT services such as internet and email may occasionally expose the post holder to distressing images and require the post holder to act as a professional witness in disciplinary hearings etc. The alignment of IT security with legislative, NHS and business security requirements and those agreed with customers Identification and management of security risks ensuring that IT Services maintains compliance in line with the overall SCW corporate governance framework, designing and maintaining appropriate security controls and security plans with procedures for their operation and maintenance Management of the overall IT security agenda in support of overall UHP & LSW corporate governance plans Management of IT security training, awareness and communications Identifying and classifying IT assets and the level of control and protection required. Assisting with Business Impact Analyses Performing regular and ad hoc security tests Ensuring that the confidentiality, integrity and availability of IT services are maintained Ensuring that all access to services by external partners and suppliers is subject to contractual agreements and responsibilities. For further details, please see the attached JD