The Specialist Security Officer will play a key role in implementing and maintaining robust cyber security controls, ensuring compliance with relevant legislation and standards (e.g., NCSC guidance, ISO 27001, GDPR), and supporting the organisation's cyber resilience strategy.
The post holder will
Monitor security alerts and threat intelligence feeds to detect and respond to cyber incidents.
Lead or support incident response activities, including investigation, containment, eradication, and recovery.
Manage and maintain security tools such as SIEM, endpoint protection, vulnerability scanners, and firewalls.
Conduct regular vulnerability assessments and coordinate remediation efforts.
Support the development and enforcement of security policies, standards, and procedures.
Conduct risk assessments and contribute to the organisation's risk register.
Ensure compliance with public sector cyber security frameworks (e.g., Cyber Essentials Plus, PSN, NIS2).
Deliver cyber security awareness training and phishing simulations to staff, promoting a culture of security across the organisation.
Provide security input into ICT and digital transformation projects.
Conduct security reviews of new systems and services, ensuring secure-by-design principles.
Liaise with internal stakeholders, external partners, and national cyber security bodies (e.g., NCSC, law enforcement).
Prepare reports and dashboards for senior management on cyber security posture and incidents.
This post reports to the Information Management and Security Team Leader.
Work as part of a flexible shift pattern to cover service hours. You will also work as part of the security 'Out of Hours' rota.
TPBN1_UKTJ