Cyber Security Risk And Assurance Manager

A Cyber Security Risk and Assurance Manageris required for a permanent role paying up to £61,909.98 per annum with British Transport Police (BTP) based at our Force Headquarters in Camden, London.

Summary:

BTP is the national police force for the rail network throughout Great Britain, including London Underground, across which we ensure the safety and security of nearly 3 billion passenger journeys and over 100 million tons of freight every year. The world in which we work is fast paced, operationally and commercially demanding, and constantly changing. This role reports directly to the Head of Cyber Security and is accountable for Cyber Security across the organisation. This is a brand new role within BTP, responsible for transforming the way we conduct Cyber Compliance.

Job Description:

The Cyber Security Risk and Assurance Manager will be responsible for the confidentiality, integrity, and availability of all our IT assets whilst continuously improving compliance within these areas. You will be the subject matter expert on all things related to Cyber Security Risk management and assessment, providing assurance for compliance requirements to ensure adherence with our Technology policies. The scope of the role encompasses the implementation of compliance management procedures, performing Security assessments and providing Security expertise and support for the monitoring of compliance and associated remediation activities. The role will take responsibility for delivering compliance metrics and tracking key remediation/improvement of Security to ensure they are delivering for the force.

The post holder will also offer specialist advice and guidance to stakeholders as well as upskilling team members and assist in maturing the existing Cyber Security function. BTP operate a flexible working policy, including the ability to work a mixture of home and office. The role will be based at our Force Head Quarters (FHQ) in Camden and will require at least 2 days in the office.

Travel to other sites may be required and flexibility in working hours to manage/resolve high priority incidents.

Person Specification:

• Strong knowledge and experience with Cyber Security policies and standards
• Strong experience in risk assessments; experience in cultivating a risk-oriented culture
• Technical aptitude and knowledge across the spectrum of Cyber Security solutions and operations
• Strong experience in measuring compliance of an organisation or digital systems against a given set of security criteria
• Experience in providing advice on data protection, Cyber Security, Business Continuity and Disaster Recovery
• Experience of implementing and supporting security control frameworks, such as NIST and ISO27001/2.
• Knowledge and experience of Cyber Security maturity frameworks such as NIST CSF, Cybersecurity Capability Maturity Model (C2M2) and NCSC CAF; understanding of Data Protection regulations.
• Strong stakeholder engagement skills, detail-oriented, delivery-focused, and able to manage multiple workstreams simultaneously
• Strong interpersonal skills, able to communicate across a broad spectrum of users, building relationships with senior internal and external stakeholders
• Excellent oral, written and presentation communication skills
• Ability to prioritise workload based on the severity of impact and risk to BTP

If you are interested in applying for this role, then please do not delay as interviews will be held as soon as suitable candidates are identified.

In return for your experience, we can offer you basic salary £50,674.42 plus £3033.56 London Allowance if applicable plus a non contractual Skills for the Information Age Supplement of up to £8202.00 (value dependant on assessment) along with the following benefits :

• Yearly base salary increments (subject to satisfactory performance in last PDR year)
• Working from home allowance available to purchase suitable equipment for blended & home working
• 28 days annual leave plus bank holidays
• Flexible agile working approach
• Family friendly policies including up to 26 weeks paid maternity and adoption leave
• Bespoke benefits platform and access to Blue Light Card
• Development opportunities including fully funded apprenticeships
• Employee assistance programme and dedicated wellbeing hub
• Excellent Pension scheme

BTP is an employer who cares about the impact we have on the environment and the wider challenges of climate change, and as such we are committed to reducing our carbon footprint and achieving Net Zero Carbon (NZC) through offsetting by 2035.

At BTP we are proud guardians of the railway and it is crucial that we represent the diverse communities we serve and protect. As ‘One BTP’ across the UK, we know that diversity, inclusion and belonging help us improve our decision making, foster creativity and drive innovation so all our people can thrive.

Our vacancies are open to everyone and all appointments are made based on merit. So that we can become more diverse we encourage applications from candidates from Black, Asian, and minority ethnic backgrounds, women, people who have a disability, those who are neurodiverse and persons who identify as LGBTQI+. We use positive action to encourage potential candidates from underrepresented groups through targeted workshops or advice sessions. If you have the skills, experience and values that here in BTP we pride ourselves on then we would welcome you to apply.

For more information on Positive Action please click here or email the team on PART-Recruitment@btp.police.uk

If you have any questions about the application process, please email our friendly and helpful team where we will be happy to help you: RecruitmentTeam@btp.police.uk. If your question related to equality or diversity then you can also contact our Equality, Diversity and Inclusion team directly at: PART-Recruitment@btp.police.uk To reassure you, anything you ask us will be in the strictest confidence and will not form part of your application.

In order to apply, you must have the permanent right to live and work in the UK and have been resident in the UK for the previous 3 years. You will be asked these and other questions to determine your eligibility to work for British Transport Police when you start your application and you must answer honestly.

BTP GPP Police Staff Pension Scheme is administered by Royal London and this is a group personal pension plan which is available to all police staff. It’s a defined contribution scheme, offering employees the flexibility to vary their pension contributions from 4.4% to 12% of their salary. For more information, visit the Royal London dedicated pension page or email us at Pension-Queries@btp.police.uk .Please note if you are an existing member of Police Staff in the RPS your pension will not be affected.

Internal candidates must have completed their probation for their current substantive posting and can only apply in tenure if Head of Department approval is emailed to Recruitmentteam@btp.police.uk prior to the vacancy closing. Internal candidates must confirm that they are not subject to formal action plans for sickness/complaints/discipline or poor performance and that all mandatory training courses have been attended and are in ticket/up to date. A minimum rating of 3 (performing) or a rating of U (no rating) must have been achieved on the last reporting year PDR. Prior to moves taking place release dates must be approved between Superintendent / Heads of Depts. Recruitment will ask for confirmation of this approval before progressing your move, if no approval is confirmed with recruitment we will not progress with your offer and will be referred to weekly controls meeting.