It Security And Information Assurance Manager

Job summary

Domesday Book. Shakespeare’s will. Tweets from Downing Street. War time records. These are just some of the 13 million items held by The National Archives. We are the official archive and publisher for the UK government and guardians of over 1,000 years of iconic national documents, one of the largest and most important archival collections in the world.

IT Operations is a welcoming department of 36 staff made up of several multidisciplinary teams, focused on delivering services that make it possible for everyone to use up to-date, secure and efficient technology services.

The IT Security and Information Assurance Manager is responsible for managing a team in the IT Operations department with overall responsibility for providing specialist advice on Cyber risk management and day to day IT Security operations as well as strategy and policy.  The team deals with IT and cyber security incident management, information and records management policies and procedures, maintenance of IT security systems and services, as well as working with suppliers and other Government Departments to ensure the delivery and development of an appropriately secure ICT network.

About the Role

We are looking for an accomplished IT Security and Information Assurance Manager to join our team in IT Operations and lead a team tasked with, designing, managing, monitoring, supporting and administering our IT Security and Information governance structure.

The security & assurance team within IT Operations conducts the following functions:

• IT and cyber security: security management (following ISO 27001), governance and compliance, accreditation and risk assessment, security engineering and operations.
• Knowledge and Information management: including records management.

This role is aligned to the Lead Cyber Security Risk Manager (Government Security Profession) and Lead Product Manager (Digital, Data and Technology) roles: identifying, understanding and mitigating cyber risks, and leading on the provision of security & assurance capabilities to IT Operations and the wider organisation.

This is a great opportunity to join a team tasked with developing and supporting The National Archives’ IT and cyber security systems, network infrastructure, compliance and accreditations.  You will apply your specialist IT security skills across a range of systems, services and processes, aligning to best practice, contributing to a high performing service-culture orientated team.  You will develop and maintain IT security policies and procedures and work with senior management to develop the IT security strategy.

About You

We are looking for a self-motivated person with strong IT security, compliance and people management skills.  A confident communicator who is comfortable with speaking to stakeholders and suppliers, you will engage with stakeholders across The National Archives to ensure that we build and improve IT Security and Information governance to meet the needs of The National Archives.

You must have very good, broad experience and knowledge of working in an IT cyber and security environment using a variety of tools to support the management and delivery of IT cyber and security services.  You should have experience in security management procedures, especially ISO 27001, governance, compliance, and accreditation.  Experience of risk, producing risk statements and conducting assessments is essential.

In addition to the activities outlined above, you must have people management experience to lead a team of IT and cyber security specialists delivering a range of IT Security and Information governance services.

This is a full-time post, however, requests for part-time working, flexible working and job share will be considered, taking into account at all times the operational needs of the department.  A combination of onsite and home working is available and applicants should be able to regularly travel to our Kew site.

We would particularly like to encourage applicants from backgrounds currently underrepresented in archives, including those who identify as Lesbian Gay Bisexual Transgender (LGBT+), from Black, Asian and minority ethnic cultural backgrounds, those who are neurodivergent, and those with hidden or visible disabilities.

SC-level Security Clearance or willingness to obtain SC clearance is mandatory for this role and requires that you have lived in the UK for the last 3 years. The length of required residency may depend on individual circumstances.

Benefits

• You will be based in a beautiful setting by the River Thames in Kew with staff parking and good transport links.
• An opportunity to work a hybrid working pattern with a minimum of 3/4 days a week working on site at Kew.
• A comprehensive benefits scheme including a generous Civil Service pension, an on-site coffee shop and restaurant, season ticket loans, on-site gym and clubs,
• 25 days leave rising incrementally to 30 days after six years (plus 10.5 days public and privilege holidays each year)
• Excellent training and development opportunities tailored to your role and an agreed development plan.
• Influencing the strategic objectives and the opportunity to define, design and implement improvements.
• An opportunity to use or learn a wide range of skills.