Head of Cyber Security (Secure Service) - C1

Job description

This opportunity is only open to internal Scottish Government applicants who are currently 'Priority Movers'. Applications from individuals not currently on the Priority Mover list will be rejected and not considered.

Help shape how the Scottish Government protects and operates some of its most sensitive services.
As Head of Cyber Security (Secure Services), you will join the National Cyber Security and Resilience Division, which brings together cyber security leadership, operational capability and assurance to strengthen resilience across Scotland and the Scottish Government. You will have the opportunity to work across government, building trusted relationships and helping ensure services operating above OFFICIAL remain secure, resilient and available.
You will provide strategic direction for secure services, lead the response to cyber security incidents and investigations, and use your judgement on security risk, controls and access. Acting as a senior point of contact for stakeholders and network owners, you will influence decisions across organisational boundaries and help ensure these important environments remain secure, fit for purpose and able to meet their assurance requirements.

Responsibilities

• Champion the security of networks operating above OFFICIAL, ensuring services remain secure and available.
• Protect the confidentiality, integrity and availability of information and information systems used by the Scottish Government and partners across government.
• Responsible for room inductions, appropriate security inductions, and ensuring appropriate vetting is held prior to approving access to rooms.
• Lead cyber security investigations, including the triage and response to security incidents affecting the services you are responsible for.
• Build and influence relationships with senior stakeholders, acting as a key point of contact for working above OFFICIAL and new business requirements.
• Responsible for managing financial costs associated with these environments.
• Has oversight of security administration processes and checks that all requests for support are dealt with according to agreed procedures.
• Help shape security policy, standards and guidance, ensuring they reflect business, technology and legal requirements and recognised professional practice.
• Work closely with network owners and partners across government to support effective cross-government collaboration.
• Ensure secure environments remain fit for purpose and meet the required audit and accreditation standards.
• Provide expert advice on physical, procedural and technical security controls, including appropriate access rights and privileges.
• Explains the purpose of and provides advice and guidance on the application and operation of elementary physical, procedural and technical security controls for your environments.
• Responsible for reporting to the Working Above Official Board (WAO) about services, systems, issues and planned works.

Working pattern

This role is a permanent level transfer position.

How to Apply

Applications for this position will only be accepted from substantive C1 employees.

Please submit a statement outlining your suitability for the role, relevant skills and experience, and what you would bring to the team (maximum 500 words).

Selection Process

All candidates will be invited to an informal discussion with the Hiring Manager.

Informal discussion dates tbc.

Further Information

If you have specific questions about the role, please contact [email protected]

Read our Candidate Guide for further information on our recruitment and application processes.