Chief Information Security Officer - Req24534

As our Chief Information Security Officer you’ll thrive being part of a dynamic, fast paced and agile team environment, committed to transforming public services through implementing and adopting contemporary technology, Cloud First, Zero Trust, replacing our soft-centred legacy on-premises and in-house systems whilst delivering significant benefits through automation, data insights and artificial intelligence. 

This role isn’t just about keeping things ticking along, worrying about firewalls and antivirus solutions. We’re looking for an innovative leader who is an enabler of our DevSecOps aspirations whilst dedicated to keeping our environment secure and compliant through good governance and working practices. We are looking for an individual who has experience of implementing necessary governance without slowing down the pace of change. 

We’re one of the largest employers in the region with over 14,000 employees with a significant IT organisation of around 400 professionals and we seek to recruit and develop talented individuals who embody our council values and ambitions.

Leeds is renowned for excellence in the digital sector, it’s a great place to continue your career and bring your experience. 

About you

As our Chief Information Security Officer you will bring to the role:

• Innovation and a passion to support our IT transformation whilst keeping us secure, flexible and Agile, improving the services we provide and ensuring value for money
• A relevant professional qualification or significant managerial experience in a similar environment
• Excellent communication to enable you to engage widely and persuasively with councillors, colleagues, partners and other stakeholders 
• Ability to manage a number of substantial budgets and collaborate to find solutions to complex financial problems

About the role 

As our next Chief Information Security Officer, you’ll be part of our Integrated Digital Service (IDS), working across Leeds City Council and the Leeds Integrated Care Board (ICB). 

You’ll lead the information and cyber security strategy and operating model for the council and ICB. 

You’ll define and embed an Information Security Policy Framework across the council and the ICB that addresses the needs of each organisation and is in line with relevant legislation, industry standards, and the statutory duties of the authority. 

You’ll also provide advice and direction to the IDS senior leadership team on the integration of security practices into the council and ICB’s processes.

Our Integrated Digital Service improves how services are delivered, using user research to inform technology based solutions that are accessible, easy to use and reliable.  We are innovating and changing services by investing in automation through technologies such as power platform and RPA. 

You’ll be essential to the team as you help them drive forward change, and you’ll see how these changes significantly improve the lives of the Leeds residents that rely on our services.  

What we offer you

We take pride in offering the best employee experience, with benefits including:

• a competitive salary and annual leave entitlement plus statutory holidays
• membership of the West Yorkshire Pension Fund with generous employer contributions
• flexible and hybrid working arrangements subject to service requirements
• a clear career pathway and continuing professional development opportunities
• a range of staff benefits to help you boost your wellbeing and make your money go further

How to apply

Apply for this job online by sending in your CV

Read our guidance for further advice. Please check your information carefully and ensure you complete all sections before submitting your application. 

If you have any queries or would like an informal chat about the role please contact Andrew Byrom,  Call 07891 275241 or email Andrew.byrom@leeds.gov.uk 

We promote diversity and want a workforce that reflects the population of Leeds and the communities we serve. Leeds City Council is an Inclusive employer, ranked 70 on the Stonewall top 100 employers 2023 list. We are also an Age friendly employer, a Mindful employer and a Disability Confident leader.

All new Leeds City Council appointments are made subject to the satisfactory completion of a six month probationary period. 

This role is based in the UK. Employment is conditional on confirmation of the right to work in the UK  - either as a UK or Irish citizen, under the EU Settlement scheme or having secured any other relevant work visa. If you do not have the right to work in the UK and the role does not meet eligibility for sponsorship, please consider carefully whether you meet the eligibility to apply.

Job Description         

Job Purpose

The Chief Information Security Officer will be responsible for leading the information and cyber security strategy and operating model for the Council and Integrated Care Board (ICB), with both the resilience and gravitas to engage widely and persuasively. Ensuring service delivery meets the required performance standards and the statutory duties of the authority. Working as part of the senior leadership team, you will live and model values and behaviours to help achieve our ambition to become the best city council in the country. While bringing together services from across the organisations to ensure consistently high levels of performance and service delivery.

The role includes strategic management of information governance and cyber security services and supports the leadership of cross-cutting projects and priorities as agreed with the Director. The post holder will be responsible for, supporting service improvement including effective and flexible deployment of staff to ensure improvement priorities are achieved.

The post holder will drive best financial practice, innovative solutions and new ways of service delivery, working in accordance with budgetary provisions and with the ambitions as set out in the City plan for Leeds.

Key Requirements 

Define, develop and maintain a Council and ICB-aligned Information Governance and Cyber Security strategy and operating model.

Define and embed an Information Security Policy Framework across the Council, ICB that addresses the needs of each organisation including colleagues, citizen, and other external stakeholders in line with relevant legislation and industry standards

Provide advice and direction to the IDS’s senior leadership team, in the integration of security practices into the Council and ICB’s strategic and operational processes

Drive and deliver change to the Council and ICB’s Information and Cyber Security systems, processes and procedures by continuously analysing and reviewing new security technologies and practices as informed by industry best practice 

Report to Council and ICB relevant committees and management groups on Information and Cyber Security matters

Represent the Council and ICB on national and international external consortium groups and boards and engage effectively in appropriate external networks, ensuring the various organisations in scope can anticipate, meet and respond to new Information and Cyber Security challenges and threats

Provide senior leadership and oversight of effective information and Cyber Security risk management, integrated with the Council and ICB’s risk management framework 

Ensure that information and Cyber Security risks to the Council and ICB presented through suppliers and delivery partners are identified and managed appropriately

Develop and maintain an effective Information Security Management System and processes for continual improvement 

Ensure Information Security and Governance are managed effectively throughout the IT service delivery lifecycle (incl. Security Operations, Security Architecture and Security Assurance)

Lead on development and delivery of measures and metrics to support the assessment, reporting and ongoing improvement of the Information Security and governance posture 

Work closely with internal stakeholders and business units to keep abreast of planned changes to technologies, working practices, and business activities that could have an impact on the Council and ICB’s Information Security or risk profile 

Define and implement an appropriate information assurance framework for the Council and ICB, enforcing compliance with policies in conjunction with internal audit 

Ensure and promote an appropriate level of Information Security culture and awareness across the Council and ICB

Direct, and assist as necessary, investigations into Information Security breaches and pursue associated disciplinary and legal matters, liaising with the relevant teams on data protection legislation ensuring root-causes of such breaches are understood and addressed 

Appropriate professional qualification of equivalent substantial knowledge gained through significant managerial experience across the service area.

Knowledge and understanding of the planning, delivery and requirements for the group of services being managed

Ability to provide effective leadership in the Directorate and implementation of innovative solutions to complex financial problems.

Ability to support the Director by leading a major area of the Service in delivering high quality, efficient services that meet the objectives and strategic priorities of the Council and government and legislative standards

To lead a Council service or programme of strategic significance to the Council in order to deliver Value for Money services to customers in line with Council priorities. 

To use strong people management skills in order to motivate, develop and performance manage staff within your service area to drive service improvements.

To be strategically responsible for the development and delivery of the service plan and to contribute to the development of Council priorities. 

To lead, promote and deliver positive solutions to achieving diversity and inclusion in all aspects of your service delivery, community engagement and human resource areas, focussing on equality of outcome.

To actively drive continuous improvement initiatives through leading and contributing to cross Council projects, collaborative working with partners and supporting Directorate Management Teams.

Within a number of service areas, to take responsibility for maintaining effective communications with staff, service users, councillors, trade unions, partners and other stakeholders.

To work with elected members, service users and community representatives in ways which support open, inclusive, responsive and accountable government.

Working as a team for Leeds by developing and maintaining good working relationships with internal and external customers, other stakeholders and partners to achieve excellent outcomes for the citizens of Leeds. 

To be accountable for the safety of staff, service users and contractors in accordance with Legislation and the Council Health and Safety Policy.

To provide appropriate strategic advice relating to the work of the Directorate to Members and council officers so as to manage risk and support them in their respective roles.

Demonstrate knowledge of legislation, regulations, policies, inspections and performance information applicable to the relevant strategic functions e.g. child protection, health, safety and security, confidentiality and data protection. Promoting compliance with Leeds City Council policies and procedures.

In line with the Budget Management Accountability Framework to be responsible and accountable for developing appropriate, proportionate and effective financial solutions to be implemented across the service.

Working Context - The role is primarily office based but post holders are expected to work flexibly both at home and at various locations across the City and region. Hours are worked mainly Monday-Friday, in accordance with the needs of the service; however the post holder will be expected to work outside normal working hours, including attendance at evening/weekend meetings or events as required.

Role profile

Roles at this level support the Chief Officer in setting the purpose and strategic direction and in leading, developing and ensuring the effective delivery of service, directorate and corporate priorities, which contribute to the achievement of the Council’s vision and strategic outcomes. This involves leading the planning, organising and commissioning the delivery of services to and on behalf of the organisation and all partners and stakeholders in the medium to long term.

People in these roles have a proficiency in a specialised field or a broad understanding of relationships between different fields. They have the ability to select, develop and assess the suitability of ways of working; and will have highly developed skills in persuading, influencing, developing and motivating people and establishing effective partnerships to achieve service objectives.

For roles at this level, you must be able to show.

Knowledge - Appropriate professional qualification or equivalent substantial knowledge gained through significant managerial experience across the service area and that you use your diverse knowledge and expertise to plan and enable the highest levels and standards in the delivery of work across either a specialist area or an entire service

Understanding of public sector issues, government legislation and its impact on Council strategy and services and that you maintain and apply up to date knowledge of current thinking and developments within professional and technical areas of expertise

Demonstrate in depth knowledge of legislation, regulations, policies, inspections and performance measures applicable to the relevant strategic functions using your knowledge to ensure significant and sustainable service improvements and outstanding results.

Leadership & Strategic Planning - Demonstrate strong leadership and management skills to develop; a high performing culture across the service where everyone can achieve their potential and ‘feel they count’ and where there is a drive to deliver the most efficient and effective business solutions. There is evidence of a high performing, engaged and productive workforce along with effective leadership and management that leads to solution focussed and quality outcomes 

Contribute to and influence the strategic direction of the service area working with a range of internal and external partners and stakeholders ensuring Business plans are in place for the service, contingencies are identified so that plan objectives can be met. 

Develop, implement, promote and evaluate strategies and policies within the service area and contribute to overarching strategies for the organisation and its partners and stakeholders ensuring Medium to longer term strategic plans have been developed and implemented; policies are developed and adapted to balance the organisations needs and customer/stakeholder outcomes

Influence and contribute to the wider issue of strategy and policy development and prioritisation for both the city and the council maintaining a comprehensive knowledge of local, regional and national issues and use this to influence city wide and city council policy and practice

Collaboration & Innovation – Establish, develop and maintain effective and collaborative working relationships with a range of internal and external stakeholders and partners to gain ownership of the shared vision and improve and enhance service delivery and innovation. Through your work you will be able to show evidence of effective and successful working relationships with Directors, Members and partner organisations across the City and region

Create a vision and direction that challenges and looks beyond the obvious and inspires and motivates others to achieve by driving change and leading by example you will set examples of innovation in managing and implementing solutions on complex issues and in transformational change programmes.

Problem Solving & Decision Making - Take responsibility and accountability for developing and implementing appropriate, proportionate and effective solutions to complex service delivery problems working autonomously as required to develop and implement solutions within the service. 

Accurately analyse information and make timely well-judged decisions in order to achieve successful outcomes across a diverse range of, related and unrelated issues. Demonstrating an understanding of the need to balance the corporate orientation with operational responsibilities and accountability for decision making

Influence and contribute to the broader responsibilities of the directorate ensuring the delivery of strategic outcomes and objectives and promoting the council values supporting the council’s leadership team in ensuring that organisational developments and improvements are focussed on delivering improved outcomes for citizens and the city

Deliver – Develop and maintain good working relationships with partner organisations, internal and external customers and wider networks to enhance services and deliver the councils vision, corporate and directorate objectives meeting key business and organisational objectives by building consensus within a multi-agency/partnership environment

Lead and manage a number of complex and potentially conflicting strategic and operational issues/priorities and be able to develop and implement innovative solutions to deliver required service outcomes with evidence of successful strategic and operational resource management with a track record of delivering effective outcomes

Resource management – High level of numeracy and analytical skills to enable financial scenario planning and the development of business cases to support service transformation. Management of a number of substantial budgets within assigned service area through effective delegation and shared decision making.  You are jointly accountable for a substantial budget within your service area ensuring that budgets are on track and that money is spent wisely

Review and monitor the performance of services, systems, budgets, teams and individuals against standards and agreed outcomes in a cost effective and flexible way that is responsive to a dynamic national, local and political context ensuring plans are in place for efficient and sustainable use of resources, employees are effectively employed and budgets are maximised

Use strong people management skills to engage, develop and performance manage resources that support adaptable ways of working and create strong more flexible teams coaching and mentoring employees and other managers to develop a culture of high performance where strategic outcomes and plans are translated into clear objectives

The role profile and specification are an outline only and may vary from time to time without changing the character of the job or level of responsibility

LCC Values 

Leeds City Council values are at the heart of everything we do. They inform the way we design and deliver our services and the way we all work and behave.  Leeds City Council expects all its employees and councillors to observe our core values and to understand our codes of conduct for ethical behaviour, correct use of the Integrated Digital Services (IDS) facilities and protection of sensitive information.

They reflect the current needs of the city. In a period of immense change and real challenge we must be both confident and decisive about what we do and how we do it. Observing our values can help us:

Working as a Team for Leeds Work in ways which are open, inclusive, responsive and accountable to develop and maintain good working relationships with internal and external customers, other stakeholders and partners to achieve excellent outcomes for the citizens of Leeds

Being Open, Honest & Trusted Ensure citizens and council members are provided with all relevant information to make decisions, learn from mistakes and seek to promote continuous improvement and best practice

Working with Communities Work effectively with the variety of partners to deliver services, communicate and involve stakeholders and the wider community in new developments to encourage ownership and commitment

Treating People Fairly Recognise that everyone has an equally important part to play within the Council and value the diverse and vibrant nature of the city and all its citizens

Spending Money Wisely Set high expectations of achievement across a range of strategic outcomes, actively seek out opportunities to improve delivery of services though partnership and feedback from service users