Information Security Analyst

Information Security Analyst (Inside IR35) - PIP0008697

Contract Term: 9 Months

Contracting Authority: Cabinet Office

Location: Bristol, London or Manchester (minimum of 60% office based)

The Cabinet Office supports the Prime Minister and ensures the effective running of government. The Cabinet Office is also the corporate headquarters for the government, in partnership with HM Treasury, and takes the lead in certain critical policy areas. More information about the Cabinet Office can be found on its website at https://www.gov.uk/government/organisations/cabinet-office

Reporting to the Cyber Transformation Manager, the post holder will be responsible for leading
on cyber and Information Security risk assessments across the Department and its Business
Units. The assessments include understanding the Department's alignment to the NCSC Cyber
Assessment Framework (CAF) and the related HMG standards.

The post holder will work within a cyber transformation programme but alongside the Central
Cyber and Information Security team in delivering against agreed deadlines whilst maintaining all
aspects of Information Security risk management.

As Information Security Analyst your main responsibilities will be:

• To support the Information Security and Assurance Manager in delivering the Information
  Security
• To support continuous improvement for Information Security practices and engagement
• To evaluate and assess cyber security controls across the business engineering practices
  and its third-party vendors to ensure compliance with the NCSC CAF
• To conduct comprehensive risk assessments using the NCSC CAF
• To collaborate with cross-functional teams to develop and implement risk management
• To use risk management techniques to identify cyber threats, risks and issues in a timely
• To be proficient in threat modelling methods and familiar with tooling practices in threat
  modelling
• To support the creation and maintenance of security policies, guidance, and standards
• To support the creation and collection of metrics, validation of security control performance and the identification of emerging cyber risks
• To manage actions and output generated by stakeholder engagements; for example,
  customers, regulators, internal and external auditors.
• To maintain currency with emerging security trends, threat intelligence, industry standards and good practice, and security enhancing technologies

Essential experience:

• Sound knowledge of and experience in an Information Security role
• Experience working in a professional services environment
• Hands-on experience conducting cyber risk assessments and developing cyber risk
  mitigation strategies
• Hands-on experience conducting cyber security control assessments
• Hands-on knowledge and experience working with recognised security frameworks such
  as, NCSC CAF, ISO27001 etc
• Strong interpersonal and communication skills (written and verbal), with the ability to
  interact with technical and non-technical stakeholders at all levels
• Knowledge of Google and Microsoft technologies beneficial
• Awareness of systems management practices and operational support tools would be
  beneficial
• Acknowledges and responds positively to exceptional events in Information Security to
  meet the objectives of the business
• SC cleared minimum or BPSS but willing to undergo SC clearance

If this role sounds like something that you would be interested in, please click the link to apply or get in touch with karl.robinson@publicsectorresourcing.co.uk

Disability confident

As a member of the disability confident scheme, The Cabinet Office guarantees to interview all candidates who have a disability and who meet all the essential criteria for the vacancy. In cases where we have a high volume of candidates who have a disability who meet all the essential criteria, we will interview the best candidates from within that group.

Cabinet Office guarantees to interview veterans or spouses / partners of military personnel who meet all the essential criteria for the vacancy. In cases where we have a high volume of ex-military candidates / military spouses or partners, who meet all of the essential criteria, wewill interview the best candidates from within that group.

If you qualify for the above, please notify us on PSRapplications@publicsectorresourcing.co.uk.

We will be in touch to discuss your suitability and arrange your Guaranteed Interview.

Should you require reasonable adjustments at any point during the recruitment process or if there is a more accessible way for us to communicate, please do let me know.

In applying for this role, you acknowledge the following, this role falls in scope of the Off Payroll Working in the Public Sector legislation. Any rates of payment quoted will reflect the gross rate per day for the assignment and will be subject to appropriate taxes and statutory costs. As such the payment to the intermediary and your income resulting from this contract will be different.

Please be aware that this role can only be worked within the UK and not Overseas.