Technology Services and Cyber Security Manager

<p class="text-muted mb-3">Anderson Knight is delighted to be partnering on a retained basis with our client Glasgow Prestwick Airport who are looking to appoint a Technology Services and Cyber Security Manager to Lead the front-line defence of Group networks and connected services, safeguarding information systems against unauthorised access, security breaches, and cyber threats, while delivering IT projects as required.</p>

<p class="text-muted mb-3">This is a key high visibility role that will Support the Head of Department in ensuring compliance with regulatory and statutory</p>

<h5 class="fw-bold text-success mt-4 mb-3">requirements relating to records management and data retention, including adherence to relevant public sector obligations and any directives issued by the Scottish Government. This role requires presence 5 days a week within Prestwick Airport.</h5>

<h5 class="fw-bold text-success mt-4 mb-3">Key Duties and Responsibilities</h5>

<p class="text-muted mb-3">Operational</p>

<p class="text-muted mb-3">• Create, update and deliver training to non-technical users to mitigate the human factor relative to network security.</p>

<p class="text-muted mb-3">• Audit and implement security improvements by assessing current situation, evaluating trends and anticipating outcomes.</p>

<p class="text-muted mb-3">• Implement all relevant policies and procedures with regards to cyber security.</p>

<p class="text-muted mb-3">• Audit group policy, processes, and procedures against cyber security frameworks to ensure compliance.</p>

<p class="text-muted mb-3">• Validate and update, where applicable, disaster recovery and business continuity processes.</p>

<p class="text-muted mb-3">• Prepare reports documenting security breaches and the extent of the damage.</p>

<p class="text-muted mb-3">• Design and develop group systems for cyber security best practice.</p>

<p class="text-muted mb-3">• Maintain all cyber security tools.</p>

<p class="text-muted mb-3">• Establish appropriate working procedures to ensure the provision of a consistently high-quality level of systems implementation and support.</p>

<p class="text-muted mb-3">• Regularly review the IT Departmental Risk Register and assist in ensuring effective mitigating control measures are in place to minimise the impact of the risks on the safety and wellbeing of the staff, and the continued operation of the business.</p>

<p class="text-muted mb-3">• Prepare any weekly and monthly reports.</p>

<p class="text-muted mb-3">• Implement policies and procedures for the effective use of computer systems within group.</p>

<p class="text-muted mb-3">• Responsible for improving technology security within group, identify opportunities and implement recommendations.</p>

<p class="text-muted mb-3">• Conduct and coordinate penetration / social engineering / vulnerability / web application / wireless assessments reviewing the outcome and implementing any change.</p>

<p class="text-muted mb-3">• Provide cover as part of the wider Engineering Systems Team currently a 1 in 4-week on call roster.</p>

<p class="text-muted mb-3">• To carry out any other reasonable duties as required, including assistance during winter operations, diversions, special events, etc.</p>

<p class="text-muted mb-3">(Secondary)</p>

<p class="text-muted mb-3">• Become familiar with and provide general 1st/2nd line reactive maintenance and support for IT systems across group estate, eg:</p>

<p class="text-muted mb-3">• Building Access Control / Physical Asset Monitoring Services</p>

<p class="text-muted mb-3">• Car Park Control Systems</p>

<p class="text-muted mb-3">• CCTV Systems</p>

<p class="text-muted mb-3">• Desktop / Laptop / Tablet / GSM Devices</p>

<p class="text-muted mb-3">• Emergency Comms & Facilities</p>

<p class="text-muted mb-3">• Network / Fixed Telephony</p>

<p class="text-muted mb-3">• Printers</p>

<p class="text-muted mb-3">• Physical & Virtual Servers and the Services Hosted Therein.</p>

<p class="text-muted mb-3">• Public Announcement and Information Display Systems</p>

<p class="text-muted mb-3">• Any other services that later fall under the remit of group Engineering Systems</p>

<p class="text-muted mb-3">• Provide support directly to the Engineering department relating to longer term projects, e.g.:</p>

<p class="text-muted mb-3">• Server and Systems Maintenance / Replacement</p>

<p class="text-muted mb-3">• System Installation, Testing, Evaluation and Commissioning</p>

<p class="text-muted mb-3">• Development and Maintenance of System Documentation</p>

<p class="text-muted mb-3">• Any other projects / systems work which may from time to time be requested by management</p>

<p class="text-muted mb-3">• Assist in the provision of technical services / support to a major emergency, incident or special event.</p>

<p class="text-muted mb-3">• Ensure all systems are comprehensively documented and the information properly archived.</p>

<p class="text-muted mb-3">• Follow appropriate working procedures to ensure the provision of a consistently high-quality level of systems implementation and support including change management.</p>

<p class="text-muted mb-3">• Keep up to date with developments in the industry and make recommendations to management for employing such developments where appropriate.</p>

<p class="text-muted mb-3">• Maintain backup systems for all stored information with consideration to sustainability.</p>

<p class="text-muted mb-3">• Maintain documentary records of all work in support of regulatory</p>

<h5 class="fw-bold text-success mt-4 mb-3">requirements examined by external authorities.</h5>

<p class="text-muted mb-3">• Provide input to and assist with the creation and maintenance of policies and procedures for the effective use of technical systems across the estate.</p>

<p class="text-muted mb-3">• Provide on-call support on site / via VPN if required by the department to meet service delivery obligations.</p>

<p class="text-muted mb-3">• Provide out of hours support to ensure operational continuity and an integral response to an emergency incident / assist appropriately based on situations arising.</p>

<p class="text-muted mb-3">• Responsible for ownership of reported issues through to conclusion / appropriate escalation.</p>

<p class="text-muted mb-3">• Understand the roles of other teams and draw on expertise to resolve issues where appropriate.</p>

<p class="text-muted mb-3">Records Management</p>

<p class="text-muted mb-3">• To implement and maintain group Records Management Plan and associated guidance, policies, and procedures.</p>

<p class="text-muted mb-3">• Complete and implement their Publication Scheme, ensuring consistency against expected standards across all classes of information.</p>

<p class="text-muted mb-3">• To promote good records management and raise awareness of records management issues.</p>

<p class="text-muted mb-3">• To advise on retention and disposal periods and establish schedules.</p>

<p class="text-muted mb-3">• Identify and manage risks related to records management, escalating risks and issues to the HTSCSDC when appropriate.</p>

<p class="text-muted mb-3">Safety and Compliance</p>

<p class="text-muted mb-3">• To ensure knowledge and understanding of all appropriate safety responsibilities as detailed in the group policy Manual.</p>

<p class="text-muted mb-3">• Ensure you operate in a safe environment and demonstrate a clear understanding of Health and Safety policies and procedures.</p>

<p class="text-muted mb-3">• To minimise incidents and accidents within your area, promoting a safe working environment.</p>

<p class="text-muted mb-3">• To support and co-operate where necessary with investigations into accidents / incidents within the department in accordance with policies.</p>

<p class="text-muted mb-3">• To ensure data is processed and handled in accordance with the General Data Protection Regulation (GDPR)</p>

<p class="text-muted mb-3">Security</p>

<p class="text-muted mb-3">• To ensure knowledge and understanding of all appropriate security responsibilities as detailed in job description and other relevant policy documents.</p>

<p class="text-muted mb-3">• To ensure that standards set at security training courses are adhered to.</p>

<p class="text-muted mb-3">Key Performance Indicators</p>

<p class="text-muted mb-3">• To deliver against the KPIs established for your area.</p>

<p class="text-muted mb-3">• To focus on improvement initiatives to outperform against the business plan</p>

<p class="text-muted mb-3">Financial</p>

<p class="text-muted mb-3">• To deliver a quality service within the budget costs.</p>

<p class="text-muted mb-3">• To deliver within the capital investment plan.</p>

<p class="text-muted mb-3">Stakeholder Relationship</p>

<p class="text-muted mb-3">To interface with relevant internal and external stakeholders, positively promoting the business and ensuring an excellent service.</p>

<p class="text-muted mb-3">To apply for this position please follow the link</p>