Lead Cyber Security Advisor

Sector: Public Sector / Government

Job Title: Lead Cyber Security Advisor

Type: Contractor

Location: London or Glasgow (hybrid initially)

Duration: 6 months initial

Vetting: SC security clearance

Providing cyber security and risk management advice and guidance to support change programmes, projects, procurement of services, and general customer cyber security enquiries

• Working closely with the Delivery Managers, Product Owner and Solutions Architects on Security Risks within technical solution projects.
• Delivering and presenting high-quality risk assessments and supporting documentation to the Security Governance Authority.
• Justifying decisions characterised by high levels of risk, impact and complexity.

• Will have either CISSP, CISM or CRISC qualification.
• Comprehensive knowledge of risk management, specifically around information security. With experience in recognised methodologies such as NIST 800-30/37, ISO 31000 etc.
• Experience of working with system, operational and strategic level risk.
• Demonstrable experience of threat modelling system solutions.
• Demonstrable experience of working with different cyber threat intelligence feeds and turning the intelligence into actionable reports.
• Working knowledge of information security.
• Demonstrable experience of providing advice, guidance and assuring documentation against security standards such as NIST, ISO27001, CIS, CAF, HMG GovS 007 and NPSA.
• Experience of working in multiple projects and initiatives with limited supervision; working effectively across multiple internal and external stakeholders groups including senior officials, customers, and suppliers; and demonstrating good written and verbal communication skills.
• Demonstrable experience of managing the internal and external cyber security risks to IT systems, services and data storage, particularly within Digital Cloud services.

• Microsoft Visio, Atlassian Jira / Confluence, Standard Microsoft Office applications (PowerPoint, Word, Excel, Outlook)
• Broad understanding of a wide range of industry standard IT technologies across Business, Data, Application, Technology, and associated security risks.