{bc}
indeed

Chief Information Security Officer

Public Sector Resourcing
Aberdeen, GBR
Full-time
Director
Onsite
Discovered 1 months ago
Information security strategyNCSC Cyber Assessment FrameworkUK GDPRSecurity operating modelsSecurity risk and assuranceThreat detection and response

Full Job Posting

About the role

Reports to the Chief Digital & Information Officer and is part of the small leadership group establishing GBE’s digital function.

Accountable for advising on, coordinating and assuring GBE’s approach to the NCSC Cyber Assessment Framework and security of personal data under UK GDPR.

Leads initially through delivery partners and transition arrangements, building a permanent security function as GBE’s estate grows.

Key responsibilities

  • Review recorded establishment-phase security decisions, confirm or adjust them against evidence, and carry them into delivery.
  • Establish the security operating model and minimum requirements for internal and partner delivery, including decisions on ICS security foundations.
  • Implement the attack detection and response delivery model and document accountability during separation from shared services.
  • Confirm required standards, close priority gaps and establish an assurance regime reporting through digital investment governance to audit, assurance and enterprise risk committees.
  • Secure cloud, collaboration, staff identity and access environments as they are established.
  • Create incident response plans, roles, on-call arrangements and exercises.
  • Baseline security maturity, set a target state and publish a prioritised improvement roadmap with ownership and measures.
  • Build security requirements into procurements and the strategic partner framework, and assure major deliveries.
  • Develop the case and plan for a permanent security function, growing capability alongside the estate.

Qualifications and experience

  • Senior security leader such as CISO, deputy CISO or head of security, with experience in complex, fast-moving organisations.
  • Track record of establishing or substantially rebuilding a security function.
  • Executive-level ownership of security strategy, risk and assurance, including presenting risk to boards and audit committees.
  • Operational accountability for detection, response and incident management.
  • Willingness to govern and personally deliver key parts of GBE’s security capability.

About Great British Energy

Great British Energy aims to drive clean energy deployment across the UK as a strategic developer, investor and owner of renewable projects.

Its mission includes delivering benefits for communities and taxpayers and supporting innovation, sustainability and impact.

Apply for this job in 1 click

Skip the repetitive application forms

Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.

Sarah M.James T.Maya R.

Trusted by over 500,000 job seekers on Base Career

Start Free Today

More from this employer

More jobs at Public Sector Resourcing